THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

paxio.com · 207.246.106.229:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.paxio.com
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Valid from
2026-09-17T00:00:00+00:00
Expires
2026-12-16T23:59:59+00:00
Days remaining
34
Serial (hex)
80091315E2532CAE02584233A1AD7433
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:www.paxio.com, DNS:paxio.com

SHA-256 fingerprint

23:B0:72:B6:31:7A:D6:3C:CA:73:F3:C2:80:27:58:49:B0:AE:AA:BF:3F:12:09:E7:DE:1E:72:B8:18:BC:F0:AA
Certificate extensions & PEM
authorityKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
subjectKeyIdentifier
2A:A0:13:9F:F1:2D:03:BA:44:81:28:89:AA:E8:79:EC:B2:5E:57:5C
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLECCDVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:www.paxio.com, DNS:paxio.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 74:DB:9D:58:F7:D4:7E:9D:FD:78:7A:16:2A:99:1C:18: CF:69:8D:A7:C7:29:91:8C:9A:18:B0:45:0D:BA:44:BC Timestamp : Sep 17 05:04:20.998 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:95:46:D1:52:E0:49:1A:BE:E2:01:31: 79:DA:C6:08:49:01:57:80:76:49:32:8C:14:A4:65:C7: 73:34:C5:19:49:02:21:00:BD:5A:19:8D:37:7F:18:C0: B5:8B:DC:63:9E:96:AE:B0:8B:8B:33:DF:F1:92:66:79: 01:35:D4:C2:4B:76:B0:22 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:81:00:18:73:4E:17:6E:1D:47:E0:95:40:F3:81:BA: 54:66:97:CD:63:A8:43:50:71:6E:B8:09:4E:DA:F1:0D Timestamp : Sep 17 05:04:21.654 2026 GMT Extensions: 00:00:05:00:0D:E5:92:A5 Signature : ecdsa-with-SHA256 30:45:02:20:57:CA:D1:DA:B6:B9:19:3E:8C:7A:03:9C: D7:4F:7F:D5:B1:26:E9:54:61:EE:C0:12:48:19:E5:65: 6D:F0:66:FD:02:21:00:B2:6B:1E:13:B0:D7:96:03:04: 07:74:BE:BE:0F:8C:2E:18:80:CC:54:59:EF:F7:EB:A8: 46:73:F3:DC:96:55:6B
-----BEGIN CERTIFICATE-----
MIIDkjCCAzegAwIBAgIRAIAJExXiUyyuAlhCM6GtdDMwCgYIKoZIzj0EAwIwRjEL
MAkGA1UEBhMCQVQxFTATBgNVBAoTDFplcm9TU0wgR21iSDEgMB4GA1UEAxMXWmVy
b1NTTCBFQ0MgRFYgU1NMIENBIDIwHhcNMjYwOTE3MDAwMDAwWhcNMjYxMjE2MjM1
OTU5WjAYMRYwFAYDVQQDEw13d3cucGF4aW8uY29tMFkwEwYHKoZIzj0CAQYIKoZI
zj0DAQcDQgAEC/p49bwrQrolWMlXOGyIEBhaZhSNdJhFVlQ8WuG70LWK+TeoHgRz
Vd5p4ZAI0AwmMygchutH76ay/TcfmTVZCqOCAjIwggIuMB8GA1UdIwQYMBaAFJRF
n9pRR3HVc66sHasIchJtrXxiMB0GA1UdDgQWBBQqoBOf8S0DukSBKImq6Hnssl5X
XDAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEF
BQcDATATBgNVHSAEDDAKMAgGBmeBDAECATBuBggrBgEFBQcBAQRiMGAwOQYIKwYB
BQUHMAKGLWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vWmVyb1NTTEVDQ0RWU1NMQ0Ey
LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wIwYDVR0R
BBwwGoINd3d3LnBheGlvLmNvbYIJcGF4aW8uY29tMIIBDQYKKwYBBAHWeQIEAgSB
/gSB+wD5AHcAdNudWPfUfp39eHoWKpkcGM9pjafHKZGMmhiwRQ26RLwAAAGgrcBg
BgAABAMASDBGAiEAlUbRUuBJGr7iATF52sYISQFXgHZJMowUpGXHczTFGUkCIQC9
WhmNN38YwLWL3GOelq6wi4sz3/GSZnkBNdTCS3awIgB+AKKBABhzThduHUfglUDz
gbpUZpfNY6hDUHFuuAlO2vENAAABoK3AYpYACAAABQAN5ZKlBAMARzBFAiBXytHa
trkZPox6A5zXT3/VsSbpVGHuwBJIGeVlbfBm/QIhALJrHhOw15YDBAd0vr4PjC4Y
gMxUWe/366hGc/PcllVrMAoGCCqGSM49BAMCA0kAMEYCIQDOjtxvr0SOFeJ86HmR
yITNnOwDJg7gPrYmsFHigW0shQIhAJZ1KNKfj+l2z68PN3Fw+N1rWQI/xTNJhqqF
pznme1PO
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-12T11:54:37+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3237
Serial (hex)
C4E1C5BB00F0278F347BE4F85D63FCCA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BE:C8:4F:CE:0D:AA:42:3F:3B:3E:ED:38:EA:48:06:6C:C5:61:8F:52:44:AD:65:CD:9F:86:24:A8:13:FA:4C:3D
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----
MIIDNTCCArugAwIBAgIRAMThxbsA8CePNHvk+F1j/MowCgYIKoZIzj0EAwMwXzEL
MAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMt
U2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgRTQ2MB4X
DTI1MDkyNDAwMDAwMFoXDTM1MDkyMzIzNTk1OVowRjELMAkGA1UEBhMCQVQxFTAT
BgNVBAoTDFplcm9TU0wgR21iSDEgMB4GA1UEAxMXWmVyb1NTTCBFQ0MgRFYgU1NM
IENBIDIwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATjn4qR1IOXAceCMsej8Qyr
4PrFw+PwjPm2vrAfijBj4u2C++Y3pZqpeLi1z05b2owKKJzQk1AtL+m1fEoFeDka
o4IBbzCCAWswHwYDVR0jBBgwFoAU0SLaTFnxS18mOKqd1u7rDcP7qWEwHQYDVR0O
BBYEFJRFn9pRR3HVc66sHasIchJtrXxiMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMB
Af8ECDAGAQH/AgEAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuc2VjdGlnby5jb20v
U2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdEU0Ni5jcmwwgYQG
CCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNv
bS9TZWN0aWdvUHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290RTQ2LnA3YzAj
BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wCgYIKoZIzj0EAwMD
aAAwZQIwXKxxvuUkvPftBuaOFx73U3FxmFtKxP1Fd/+8Jq/ut2XgDrJ1vEUDdJb3
iSDXVe9AAjEA8iUwhrRHdZrIWqfgGmDMBbuXRZ4GoQbLpwxgcPhKo3OZR7SecTp4
juWAOpuawM2n
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4085
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →