DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

statcounter.com · 104.20.23.96:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=statcounter.com
Issuer
C=US O=SSL Corporation CN=Cloudflare TLS Issuing ECC CA 3
Valid from
2026-09-26T22:32:46+00:00
Expires
2026-12-25T22:39:54+00:00
Days remaining
79
Serial (hex)
2D9D7E1C653EE81F74C669CE18E159D4
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:statcounter.com, DNS:*.statcounter.com, DNS:*.us-tampa.statcounter.com, DNS:*.us-dallas.statcounter.com

SHA-256 fingerprint

BB:A3:90:FD:E2:5C:84:30:C2:86:E2:31:46:FF:B3:6F:F3:8C:F4:63:2F:DE:C5:16:DC:B1:CA:64:34:C7:17:7A
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66
authorityInfoAccess
CA Issuers - URI:http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer OCSP - URI:http://o.cf-i.ssl.com
subjectAltName
DNS:statcounter.com, DNS:*.statcounter.com, DNS:*.us-tampa.statcounter.com, DNS:*.us-dallas.statcounter.com
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.38064.1.3.1.1
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://c.cf-i.ssl.com/ae801ed1c55bb579d79208b0d772acfb8cc3a208.crl
keyUsage
Digital Signature
1.3.6.1.4.1.44363.44

ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 26 22:42:47.883 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E2:B6:30:DF:E6:A1:ED:62:A8:53:8F: 40:FB:3A:2B:7C:24:29:89:0C:08:FA:45:76:EE:EC:54: AE:4F:A1:DF:B8:02:20:68:4A:AD:DA:6A:AC:17:FE:E3: 48:98:57:22:78:55:22:AA:DF:00:7C:10:44:AF:A9:B4: 9E:C7:39:EA:E9:FA:9B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Sep 26 22:42:47.903 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3E:69:86:80:20:89:59:06:CF:A6:06:3C: C8:B9:BD:9E:54:82:AB:6B:70:5A:86:10:12:9C:3E:EF: 7C:42:55:95:02:21:00:86:57:25:FF:37:F2:A5:11:03: C2:06:C4:F3:40:93:B7:62:D0:B1:0B:2A:24:3E:9E:21: 15:35:DB:8D:5D:E1:9E
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-07T03:19:39+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=US O=SSL Corporation CN=Cloudflare TLS Issuing ECC CA 3
Issuer
C=US O=SSL Corporation CN=SSL.com TLS Transit ECC CA R2
Valid from
2025-05-29T19:49:45+00:00
Expires
2035-05-27T19:49:44+00:00
Days remaining
3154
Serial (hex)
31EEE88AFB87CD9EF8336604743F9B27
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

F1:5F:29:AB:EF:73:AA:4D:D9:AB:75:4B:AE:AE:36:85:BD:D3:87:4B:46:B5:25:07:11:77:62:86:85:71:80:26
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-T-ECC-R2.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSL.com-TLS-T-ECC-R2.crl
subjectKeyIdentifier
83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=SSL Corporation CN=SSL.com TLS Transit ECC CA R2
Issuer
C=US O=SSL Corporation CN=SSL.com TLS ECC Root CA 2022
Valid from
2022-10-21T17:02:23+00:00
Expires
2037-10-17T17:02:22+00:00
Days remaining
4028
Serial (hex)
604D8AF8D00BA8748B955853172C5F2E
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

5D:1B:C3:99:27:4E:64:9E:1C:72:69:7D:E9:1A:54:AD:72:50:88:C5:22:1C:B6:1E:17:EE:9C:29:0B:C4:2A:92
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:1
authorityKeyIdentifier
89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.ssl.com/repository
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-ECC.crl
subjectKeyIdentifier
32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US O=SSL Corporation CN=SSL.com TLS ECC Root CA 2022
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2025-08-01T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
816
Serial (hex)
173DCA60EA9F8E1026DAFCD72810E48E
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BA:06:D3:D3:E3:48:FC:E7:47:8C:C8:4B:42:2D:0E:63:8E:9E:22:1E:F1:A0:B5:3A:DC:14:CC:70:E0:4B:8A:B8
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:2
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3 Policy: 1.3.6.1.4.1.38064.1.3.1.1 Policy: 1.3.6.1.4.1.38064.1.3.1.2 Policy: 1.3.6.1.4.1.38064.1.3.1.3 Policy: 1.3.6.1.4.1.38064.1.3.1.4 Policy: 1.3.6.1.4.1.38064.1.3.1.5 Policy: 1.3.6.1.4.1.38064.1.3.1.6
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →