DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

embrapa.br · 200.202.168.147:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=DISTRITO FEDERAL L=BRASILIA O=EMBRAPA (EMPRESA BRASILEIRA DE PESQUISA AGROPECUARIA) CN=*.embrapa.br
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2026-03-04T13:26:10+00:00
Expires
2027-04-05T13:26:09+00:00
Days remaining
157
Serial (hex)
67A778143A21CE9D505D5977
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.embrapa.br, DNS:embrapa.br

SHA-256 fingerprint

85:12:C5:79:36:2D:9F:F8:85:D1:95:9D:90:78:D2:4A:1C:8E:DD:77:BB:D0:5A:89:D4:22:40:1F:6F:6A:18:81
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
subjectAltName
DNS:*.embrapa.br, DNS:embrapa.br
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
F8:86:5E:86:30:8C:9B:87:45:7F:6E:13:75:45:A9:24:CE:48:CD:C8
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Mar 4 13:26:14.774 2026 GMT Extensions: 00:00:05:00:03:04:55:4F Signature : ecdsa-with-SHA256 30:43:02:1F:3F:07:C2:27:D9:AB:80:CB:58:F4:BF:22: C3:49:63:49:54:FB:3E:4A:16:64:2A:25:34:B8:AD:4C: AA:CA:5D:02:20:1E:4F:4A:EA:22:A2:6C:B3:AA:72:34: E2:14:1A:09:83:DB:E2:F8:D7:B6:62:7B:52:32:DB:28: AA:23:A8:B8:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Mar 4 13:26:14.728 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:CC:22:FE:C1:6B:21:B3:AC:C3:96: F6:41:3F:EF:45:5B:AB:6D:D4:80:47:74:34:FB:9D:64: 0E:CA:56:62:A0:02:20:1B:7A:BE:0F:2B:C2:3C:45:65: 20:31:75:65:C2:A5:35:A2:F6:13:83:5D:45:CE:A3:CA: 9E:7E:0D:E5:A7:7C:00 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Mar 4 13:26:13.982 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:07:31:C1:BC:43:16:B6:B9:08:8A:A7:9B: CD:E5:7F:B7:D1:6D:63:EE:4E:58:DB:4A:57:F2:88:8A: 82:FC:AA:98:02:20:63:1C:75:8D:45:8E:F8:56:0D:3C: 28:AA:FA:2B:1A:19:A1:46:0B:01:CB:21:F1:F2:F1:E6: 8D:A8:73:BC:B9:9E
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-30T01:42:07+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
752
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fIh38YjvUMzqFVzANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xODExMjEwMDAwMDBaFw0yODEx
MjEwMDAwMDBaMFAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52
LXNhMSYwJAYDVQQDEx1HbG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdaydUMGCEAI9WXD+uu3Vxoa2uP
UGATeoHLl+6OimGUSyZ59gSnKvuk2la77qCk8HuKf1UfR5NhDW5xUTolJAgvjOH3
idaSz6+zpz8w7bXfIa7+9UQX/dhj2S/TgVprX9NHsKzyqzskeU8fxy7quRU6fBhM
abO1IFkJXinDY+YuRluqlJBJDrnw9UqhCS98NE3QvADFBlV5Bs6i0BDxSEPouVq1
lVW9MdIbPYa+oewNEtssmSStR8JvA+Z6cLVwzM0nLKWMjsIYPJLJLnNvBhBWk0Cq
o8VS++XFBdZpaFwGue5RieGKDkFNm5KQConpFmvv73W+eka440eKHRwup08CAwEA
AaOCASkwggElMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdDgQWBBT473/yzXhnqN5vjySNiPGHAwKz6zAfBgNVHSMEGDAWgBSP8Et/qC5F
JK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAroCmgJ4Yl
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJmQyC1fQorUC2bbmANz
EdSIhlIoU4r7rd/9c446ZwTbw1MUcBQJfMPg+NccmBqixD7b6QDjynCy8SIwIVbb
0615XoFYC20UgDX1b10d65pHBf9ZjQCxQNqQmJYaumxtf4z1s4DfjGRzNpZ5eWl0
6r/4ngGPoJVpjemEuunl1Ig423g7mNA2eymw0lIYkN5SQwCuaifIFJ6GlazhgDEw
fpolu4usBCOmmQDo8dIm7A9+O4orkjgTHY+GzYZSR+Y0fFukAj6KYXwidlNalFMz
hriSqHKvoflShx8xpfywgVcvzfTO3PYkz6fiNJBonf6q8amaEsybwMbDqKWwIX7e
SPY=
-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2009-03-18T10:00:00+00:00
Expires
2029-03-18T10:00:00+00:00
Days remaining
870
Serial (hex)
04000000000121585308A2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3B
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →