DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

entrust.com · 104.18.23.106:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
serialNumber=705421 jurisdictionC=US jurisdictionST=Delaware businessCategory=Private Organization C=US ST=Minnesota O=Entrust Corporation CN=entrust.com
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA EV R36
Valid from
2025-11-24T00:00:00+00:00
Expires
2026-11-24T23:59:59+00:00
Days remaining
14
Serial (hex)
3C8AE6791F4A97FF27A4AC367300F161
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:entrust.com, DNS:activation.licensing.entrust.com, DNS:adp.entrust.com, DNS:autodiscover.entrust.com, DNS:china-proxy-test.entrust.com, DNS:china-proxy.entrust.com, DNS:credential-builder-dev.demo.entrust.com, DNS:credential-builder.demo.entrust.com, DNS:fb.entrust.com, DNS:fd.entrust.com, DNS:fd2.entrust.com, DNS:fd3.entrust.com, DNS:fd4.entrust.com, DNS:fs.entrust.com, DNS:in.entrust.com, DNS:kiteworks.entrust.com, DNS:licensing.entrust.com, DNS:mail.entrust.com, DNS:online.entrust.com, DNS:outlook.entrust.com, DNS:plm.entrust.com, DNS:plmdev.entrust.com, DNS:plmtest.entrust.com, DNS:sumaidmzprx.entrust.com, DNS:test.entrust.com, DNS:testonline.entrust.com, DNS:w2.entrust.com, DNS:wb.entrust.com, DNS:wbw.entrust.com, DNS:wd.entrust.com, DNS:wd2.entrust.com, DNS:wd3.entrust.com, DNS:wd4.entrust.com, DNS:wdw.entrust.com, DNS:web.entrust.com, DNS:ws.entrust.com, DNS:wsw.entrust.com, DNS:www.entrust.com, DNS:www.kiteworks.entrust.com

SHA-256 fingerprint

C3:1B:22:AE:55:ED:8E:C6:32:76:BD:9C:CC:CA:73:09:6B:17:BE:78:90:20:4A:93:54:FB:D0:F7:96:24:D9:AA
Certificate extensions & PEM
authorityKeyIdentifier
98:2D:5E:1E:8F:EB:54:F4:B9:FF:55:95:AD:4C:C7:7E:A4:98:AE:7B
subjectKeyIdentifier
FA:96:FC:4A:6D:C7:3A:F9:C2:47:A7:51:DC:B4:B6:89:1C:B0:AF:9B
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.5.1 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAEVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAEVR36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 24 16:48:13.238 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:66:A6:77:5F:3F:62:D3:4D:07:7B:07:27: DD:99:05:B5:5F:86:45:0A:99:7B:42:50:DF:A3:15:4F: C0:34:34:1E:02:20:2D:F8:89:AD:95:0F:C9:91:22:B6: 76:9D:2B:1F:B7:97:EA:28:03:83:2F:37:25:69:A1:F4: 3F:74:FC:C3:1A:4F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 24 16:48:13.429 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FC:74:16:61:16:5B:72:81:CC:DE:72: 65:66:91:F7:03:5F:5A:31:B4:0C:83:53:E3:6C:9E:FA: 26:35:E2:37:73:02:21:00:B4:B0:78:48:39:CA:63:FA: F0:9E:08:A7:F8:0C:80:28:B3:8F:4F:0A:A8:5E:02:69: B0:5F:9A:F9:23:F5:99:2C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 24 16:48:13.230 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FE:AE:00:B1:5F:38:BC:94:E6:52:AB: 27:0C:49:32:90:0C:54:14:5F:71:77:54:A4:26:B6:04: 29:F1:B7:8D:44:02:20:72:EC:BF:0A:E9:68:E7:05:77: 38:F3:F9:D3:3E:8B:EE:57:7C:D7:97:14:EB:28:B5:AD: 99:28:64:D9:0C:B2:14
subjectAltName
DNS:entrust.com, DNS:activation.licensing.entrust.com, DNS:adp.entrust.com, DNS:autodiscover.entrust.com, DNS:china-proxy-test.entrust.com, DNS:china-proxy.entrust.com, DNS:credential-builder-dev.demo.entrust.com, DNS:credential-builder.demo.entrust.com, DNS:fb.entrust.com, DNS:fd.entrust.com, DNS:fd2.entrust.com, DNS:fd3.entrust.com, DNS:fd4.entrust.com, DNS:fs.entrust.com, DNS:in.entrust.com, DNS:kiteworks.entrust.com, DNS:licensing.entrust.com, DNS:mail.entrust.com, DNS:online.entrust.com, DNS:outlook.entrust.com, DNS:plm.entrust.com, DNS:plmdev.entrust.com, DNS:plmtest.entrust.com, DNS:sumaidmzprx.entrust.com, DNS:test.entrust.com, DNS:testonline.entrust.com, DNS:w2.entrust.com, DNS:wb.entrust.com, DNS:wbw.entrust.com, DNS:wd.entrust.com, DNS:wd2.entrust.com, DNS:wd3.entrust.com, DNS:wd4.entrust.com, DNS:wdw.entrust.com, DNS:web.entrust.com, DNS:ws.entrust.com, DNS:wsw.entrust.com, DNS:www.entrust.com, DNS:www.kiteworks.entrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-10T12:23:20+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA EV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3419
Serial (hex)
6D4F7CAD335377C8C6E001DDE2E2C88E
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7A:1A:24:28:5E:25:E9:4D:F2:7C:E8:B3:44:B1:BB:6B:32:F0:25:4F:F0:D7:B5:AB:6E:85:6A:E9:0C:FD:E5:5C
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
98:2D:5E:1E:8F:EB:54:F4:B9:FF:55:95:AD:4C:C7:7E:A4:98:AE:7B
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4087
Serial (hex)
D27FBBC1DE359E5216AD6149586099C4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4087
Serial (hex)
01FD6D30FCA3CA51A81BBC640E35032D
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
Certificate extensions & PEM
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →