DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

hostzone.net · 45.179.88.160:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=cliente.hostzone.com.br
Issuer
C=US O=Let's Encrypt CN=R3
Valid from
2023-09-08T08:44:33+00:00
Expires
2023-12-07T08:44:32+00:00
Days remaining
-1071
Serial (hex)
03AA1C39140085B431ADADDE69EDCDD48862
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:cliente.hostzone.com.br

SHA-256 fingerprint

64:E6:63:E7:6C:62:22:64:F4:D8:C3:5D:83:C3:23:8F:70:04:09:3E:6F:60:15:70:D7:D8:2F:94:09:BE:83:75
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
1A:04:85:74:75:38:D2:67:5F:F7:57:CB:BF:73:21:DE:6D:DD:7D:38
authorityKeyIdentifier
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
OCSP - URI:http://r3.o.lencr.org CA Issuers - URI:http://r3.i.lencr.org/
subjectAltName
DNS:cliente.hostzone.com.br
certificatePolicies
Policy: 2.23.140.1.2.1
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84: 16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52 Timestamp : Sep 8 09:44:33.779 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:31:A5:F3:53:BD:E1:D6:D1:3A:86:3C:2D: DB:19:9B:E7:A7:27:B9:65:68:2E:E5:2E:F8:4D:7C:1E: F5:3D:BE:E6:02:20:01:8A:25:54:E9:93:71:65:06:D9: 9D:86:02:28:78:A5:E2:9D:0D:CC:9E:00:4E:3C:41:15: 9A:1B:7A:3B:7D:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A: B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A Timestamp : Sep 8 09:44:33.852 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CF:2F:7F:05:D9:79:32:4E:CB:D2:EE: C1:F5:EE:E1:2F:44:71:1C:2C:51:EB:27:59:53:0A:43: 1E:1D:EA:95:18:02:20:66:06:B1:14:FF:94:40:A8:98: D7:57:45:96:F3:D8:86:C4:39:6F:91:BC:10:6C:10:19: A4:E7:33:9C:A2:50:BE
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISA6ocORQAhbQxra3eae3N1IhiMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDgwODQ0MzNaFw0yMzEyMDcwODQ0MzJaMCIxIDAeBgNVBAMT
F2NsaWVudGUuaG9zdHpvbmUuY29tLmJyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsuu7ibTbQCuelsftuao+UBWLGcTMo2uO+CNhLleg+8uwnFStJ/Q5
roQ3OVPoguq8eUh05b44KuTUhb3e3txe5N69Lna1tRA7UeM3X6JYMgy/IP/HonPK
7gAa4D1PZ0CRQ/orggUDQuDreNAyWi2E2z9vMfbIWwzMxWr7bUyOPRDYs691ZWcO
a/N88F+UY9VvMrnmfZNWyXFPWRMFxpaJvLYaJll3Dr/7xopI3l9Tcp1swxnnP08P
j6nOxMR+gXs0r5/jtX/jnoY9WcN7VneSBBs5rJJ25W8ZQF/86oe7NhFLjdRNxA5p
68IBGqaG9r1owk98qQXTsGivbn38YY/RYQIDAQABo4ICGDCCAhQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBQaBIV0dTjSZ1/3V8u/cyHebd19ODAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzAiBgNVHREEGzAZghdjbGllbnRlLmhvc3R6b25lLmNvbS5icjAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoy
jFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABinQtzvMAAAQDAEYwRAIg
MaXzU73h1tE6hjwt2xmb56cnuWVoLuUu+E18HvU9vuYCIAGKJVTpk3FlBtmdhgIo
eKXinQ3MngBOPEEVmht6O32oAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG
NOvcgooAAAGKdC3PPAAABAMARzBFAiEAzy9/Bdl5Mk7L0u7B9e7hL0RxHCxR6ydZ
UwpDHh3qlRgCIGYGsRT/lEComNdXRZbz2IbEOW+RvBBsEBmk5zOcolC+MA0GCSqG
SIb3DQEBCwUAA4IBAQCT+d1zU+YnlUXcxoCpwXBDn0NnxNWp/WauzE+OXXPesd4B
6KV2BNWeV9yatF8lrtR/PdftbxM71sKG//R8rHkSjprAI5rQPPGJsW2u+xPmA57F
EM4GYJhgYqhF5UplrRX46jmlg+5J9Gx5qhrerWN0kPH9u5T6ZMI8Lx/nIRLqhBqr
3og+SNVGdjOzawfPsQfE9RkQVgrYAQK1NV6UG9xl6kK0nxo74mqAYf2lQ7cip61f
tNT0S0P+6KoLjXiyN1BhcXZLSeBksa89YnjoYs/52TB5hHVko76eiXb+Fvk3sa5O
d4ucQrl96qaMb/vPsMocLatZVgP9GxrB+KpX3SnF
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-CHACHA20-POLY1305 · Checked 2026-11-11T21:41:18+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R3
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2020-09-04T00:00:00+00:00
Expires
2025-09-15T16:00:00+00:00
Days remaining
-423
Serial (hex)
912B084ACF0C18A753F6D62E25A75F5A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

67:AD:D1:16:6B:02:0A:E6:1B:8F:5F:C9:68:13:C0:4C:2A:A5:89:96:07:96:86:55:72:A3:C7:E7:37:61:3D:FD
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Internet Security Research Group CN=ISRG Root X1
Issuer
O=Digital Signature Trust Co. CN=DST Root CA X3
Valid from
2021-01-20T19:14:03+00:00
Expires
2024-09-30T18:14:03+00:00
Days remaining
-773
Serial (hex)
4001772137D4E942B8EE76AA3C640AB7
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6D:99:FB:26:5E:B1:C5:B3:74:47:65:FC:BC:64:8F:3C:D8:E1:BF:FA:FD:C4:C2:F9:9B:9D:47:CF:7F:F1:C2:4F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
authorityInfoAccess
CA Issuers - URI:http://apps.identrust.com/roots/dstrootcax3.p7c
authorityKeyIdentifier
C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.root-x1.letsencrypt.org
crlDistributionPoints
Full Name: URI:http://crl.identrust.com/DSTROOTCAX3CRL.crl
subjectKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →