DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mx.baidu.com · 104.193.89.228:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `mx.baidu.com'

Certificate verification failed

Subject
C=CN ST=北京市 O=BeiJing Baidu Netcom Science Technology Co., Ltd CN=email.baidu.com
Issuer
C=US O=DigiCert, Inc. CN=DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1
Valid from
2026-09-02T00:00:00+00:00
Expires
2027-03-19T23:59:59+00:00
Days remaining
134
Serial (hex)
09C9E3C53545CE4EB0FCF5477E82AEC3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:email.baidu.com, DNS:mail.baidu.com, DNS:spam.baidu.com, DNS:autodiscover.baidu.com, DNS:dumail-ews.baidu.com, DNS:infoflow-ews.baidu.com, DNS:mailaudit.baidu.com, DNS:adfs.baidu.com

SHA-256 fingerprint

19:A7:38:58:68:E7:C4:2E:F7:D5:2C:9D:1A:7F:2D:7D:E9:46:C3:49:8F:FC:F1:D9:05:BC:63:C9:EB:1C:48:F7
Certificate extensions & PEM
authorityKeyIdentifier
E1:6C:C3:94:85:6F:E7:41:2F:55:7A:33:7D:8F:5F:B6:20:50:36:15
subjectKeyIdentifier
C1:1E:60:36:AA:0A:7E:1E:E8:DD:4F:82:D5:B5:D2:1D:6D:3A:75:6B
subjectAltName
DNS:email.baidu.com, DNS:mail.baidu.com, DNS:spam.baidu.com, DNS:autodiscover.baidu.com, DNS:dumail-ews.baidu.com, DNS:infoflow-ews.baidu.com, DNS:mailaudit.baidu.com, DNS:adfs.baidu.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertSecureSiteProG2TLSCNRSA4096SHA2562022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertSecureSiteProG2TLSCNRSA4096SHA2562022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 2 01:13:03.401 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:60:EB:80:95:68:51:26:AC:A3:63:A3:D5: 42:54:64:1B:DA:66:A5:56:47:97:04:A3:46:EE:DB:C0: C5:61:17:00:02:20:0E:1C:50:6A:03:51:86:78:EB:52: 00:72:C7:18:83:69:E7:D1:19:9F:00:51:B6:31:2A:BA: 2D:3A:D8:13:85:DB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Sep 2 01:13:03.377 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5A:E4:4A:F7:65:0A:B3:53:17:2A:02:64: 0D:80:50:94:42:64:20:89:32:0E:FF:66:3E:AD:D1:D5: 40:50:01:BC:02:20:07:C3:44:C4:9C:DA:60:77:E0:C8: 1F:5A:1C:71:DC:58:A3:C8:31:87:BF:F5:BE:6F:EE:89: 6E:CE:A8:F6:26:D8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Sep 2 01:13:03.455 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D5:36:FF:A5:A1:08:6E:AD:40:DD:9D: D5:B4:72:96:79:C5:D6:3F:43:31:82:E5:43:41:64:1D: 7B:A0:39:C8:FA:02:21:00:A7:2B:F7:CF:6F:A1:B2:F8: 93:B8:F8:B7:79:13:47:8A:6C:A0:C8:1E:C7:36:16:06: 46:84:71:85:0D:CC:00:9C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-05T06:06:04+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert, Inc. CN=DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-12-15T00:00:00+00:00
Expires
2032-12-14T23:59:59+00:00
Days remaining
2231
Serial (hex)
0FC9FFFD217E9F57F5EA1E2D80D92050
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

82:6E:BD:90:E9:46:C2:5D:3D:F0:5A:BF:B9:11:AC:0A:42:6C:7A:9A:06:3B:72:24:46:47:10:BE:C5:A5:8C:E1
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
E1:6C:C3:94:85:6F:E7:41:2F:55:7A:33:7D:8F:5F:B6:20:50:36:15
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
Valid from
2024-01-18T00:00:00+00:00
Expires
2031-11-09T23:59:59+00:00
Days remaining
1830
Serial (hex)
0FE032AB844D033106C50C8E13C8B068
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
authorityKeyIdentifier
03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →