DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

dns2.thzhost.com · 103.246.18.126:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=freedns.icez.net
Issuer
C=US O=Let's Encrypt CN=Let's Encrypt Authority X3
Valid from
2020-01-06T16:34:11+00:00
Expires
2020-04-05T16:34:11+00:00
Days remaining
-2375
Serial (hex)
0361F42B998CE1B0D91F40A2CA3A83737932
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:freedns.icez.net

SHA-256 fingerprint

BA:38:EF:2E:58:A5:23:A8:79:06:97:A2:88:1A:01:F4:3D:19:85:32:D2:56:18:D4:EB:81:91:72:41:01:41:4F
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
63:5D:9F:72:A0:39:FD:A1:76:DA:AF:04:56:6F:B5:6A:61:01:80:47
authorityKeyIdentifier
A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
authorityInfoAccess
OCSP - URI:http://ocsp.int-x3.letsencrypt.org CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
subjectAltName
DNS:freedns.icez.net
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.letsencrypt.org
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : B2:1E:05:CC:8B:A2:CD:8A:20:4E:87:66:F9:2B:B9:8A: 25:20:67:6B:DA:FA:70:E7:B2:49:53:2D:EF:8B:90:5E Timestamp : Jan 6 17:34:11.171 2020 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:90:85:B7:89:0C:B9:D3:60:40:79:4F: 98:43:69:59:7A:87:4E:CB:37:BC:CE:38:21:B5:4E:E5: 1B:12:41:0A:AC:02:20:79:A8:2F:A6:D9:65:BD:79:4B: 1B:A9:22:C7:97:AF:0C:8D:7B:98:21:B6:84:AF:DF:3E: 05:72:82:7B:0E:9D:F2 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77: 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13 Timestamp : Jan 6 17:34:11.221 2020 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DF:95:43:89:B5:8B:0F:23:EC:E1:EE: 5D:70:CC:1E:AB:77:59:19:17:4E:44:7E:BC:80:00:A3: 8A:EA:F3:91:38:02:20:47:2C:D5:FA:65:C4:A4:0F:23: D0:DE:A4:C1:5A:0B:BC:EA:08:D1:FC:F8:32:47:55:94: A0:33:A1:99:FE:EA:8A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-05T19:10:51+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=Let's Encrypt Authority X3
Issuer
O=Digital Signature Trust Co. CN=DST Root CA X3
Valid from
2016-03-17T16:40:46+00:00
Expires
2021-03-17T16:40:46+00:00
Days remaining
-2029
Serial (hex)
0A0141420000015385736A0B85ECA708
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

25:84:7D:66:8E:B4:F0:4F:DD:40:B1:2B:6B:07:40:C5:67:DA:7D:02:43:08:EB:6C:2C:96:FE:41:D9:DE:21:8D
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://isrg.trustid.ocsp.identrust.com CA Issuers - URI:http://apps.identrust.com/roots/dstrootcax3.p7c
authorityKeyIdentifier
C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.root-x1.letsencrypt.org
crlDistributionPoints
Full Name: URI:http://crl.identrust.com/DSTROOTCAX3CRL.crl
subjectKeyIdentifier
A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →