THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

xervera.net · 68.65.122.225:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=xervera.net
Issuer
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Valid from
2026-08-26T15:09:45+00:00
Expires
2027-03-12T15:16:52+00:00
Days remaining
146
Serial (hex)
54AFBC0A1A7A14D7DAE6C2D4AA6CE3B8
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:xervera.net, DNS:www.xervera.net

SHA-256 fingerprint

EE:2A:FA:39:88:10:E6:8E:D7:1E:AB:76:70:9C:96:45:7C:BF:2F:79:8C:DC:41:70:48:3F:77:8C:D1:F2:C9:4C
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-I-RSA-R1.cer OCSP - URI:http://ocsps.ssl.com
subjectAltName
DNS:xervera.net, DNS:www.xervera.net
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.38064.1.3.1.1
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSL.com-TLS-I-RSA-R1.crl
subjectKeyIdentifier
09:4E:3A:5E:DE:AC:3D:A3:E2:F4:79:BB:5C:6E:AF:BA:A9:74:4C:AE
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Aug 26 15:19:46.875 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FA:F7:7F:22:06:19:F0:5E:B8:7E:EB: 0C:16:BD:F5:18:F8:52:83:D3:AF:4B:BB:83:F9:51:7C: B9:31:72:D5:1D:02:20:11:99:3D:35:C2:F1:82:35:1B: 13:0E:BE:74:41:6C:B3:CB:84:EC:F6:54:25:5D:1B:87: E4:98:0A:3B:AB:A8:3A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Aug 26 15:19:46.874 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4C:8B:D6:45:60:ED:C3:DA:0A:2C:13:1A: 35:14:64:C0:F3:8B:DF:09:AD:EE:03:14:42:3A:D5:FB: F8:7A:4F:E4:02:21:00:8E:11:6E:9B:4D:0B:94:28:31: DB:C4:35:3B:24:75:11:44:81:9C:8F:1C:F1:56:5C:A4: 80:42:B5:E8:74:B5:BB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 26 15:19:46.888 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:AA:B9:41:C9:61:7E:65:80:40:14:00: 33:8B:B6:4B:9E:34:CE:03:A2:14:B8:69:18:0B:32:CC: 5A:77:17:9B:51:02:20:57:5E:21:1B:7C:EC:DA:20:F4: DA:70:19:81:E7:D4:71:08:67:CF:40:02:1E:08:11:6F: DE:DA:99:7F:8E:FD:99
-----BEGIN CERTIFICATE-----
MIIGbTCCBNWgAwIBAgIQVK+8Chp6FNfa5sLUqmzjuDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSYwJAYDVQQD
DB1TU0wuY29tIFRMUyBJc3N1aW5nIFJTQSBDQSBSMTAeFw0yNjA4MjYxNTA5NDVa
Fw0yNzAzMTIxNTE2NTJaMBYxFDASBgNVBAMMC3hlcnZlcmEubmV0MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPo/lVhifOjEu/x3d8M9SQiXchnvbiXi
iZGvaXixJzJuaqfUzjWkqLFwIXxQ5SIIwV56alkELOoSQKIfLk8R9WV06Y2Zo1XW
tdOvdoUPKIIiYRlpAo1LIg615vXoeHJz25mek0/dTOhhrLytFURe19K9dxj7kdZb
jG4czeHVj0Me83tKBYYiK+BrfT/Yr5Pwb8zpLKmzj4nL+tsFjWz+q/zebqZqUGgD
UfDQAnQpMg07qPd6B49X1BmDALhx90xyMlUcM4Qd6yl8oNyZCAXyVE/e1iYpu8Dz
6pT07lIgvaBfIkM8fu9eIjy9OG/h9cte/9nIJCP0DTSlAxIE9ijy0wIDAQABo4IC
/DCCAvgwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBR5upR3oA0Z3TTmOaT8TKXS
Wm31jDBqBggrBgEFBQcBAQReMFwwOAYIKwYBBQUHMAKGLGh0dHA6Ly9jZXJ0LnNz
bC5jb20vU1NMLmNvbS1UTFMtSS1SU0EtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRw
Oi8vb2NzcHMuc3NsLmNvbTAnBgNVHREEIDAeggt4ZXJ2ZXJhLm5ldIIPd3d3Lnhl
cnZlcmEubmV0MCMGA1UdIAQcMBowCAYGZ4EMAQIBMA4GDCsGAQQBgqkwAQMBATAd
BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPQYDVR0fBDYwNDAyoDCgLoYs
aHR0cDovL2NybHMuc3NsLmNvbS9TU0wuY29tLVRMUy1JLVJTQS1SMS5jcmwwHQYD
VR0OBBYEFAlOOl7erD2j4vR5u1xur7qpdEyuMA4GA1UdDwEB/wQEAwIFoDCCAX4G
CisGAQQB1nkCBAIEggFuBIIBagFoAHYARqI5Z8YNtkaHxm89+ZmUdpOmphEghFfV
Vefj0KHZtkYAAAGgPqfpuwAABAMARzBFAiEA+vd/IgYZ8F64fusMFr31GPhSg9Ov
S7uD+VF8uTFy1R0CIBGZPTXC8YI1GxMOvnRBbLPLhOz2VCVdG4fkmAo7q6g6AHYA
ABpdGhwtk3W2SFV4+C9xoa5u7zl9KXyK4xV7yt7hoB4AAAGgPqfpugAABAMARzBF
AiBMi9ZFYO3D2gosExo1FGTA84vfCa3uAxRCOtX7+HpP5AIhAI4RbptNC5QoMdvE
NTskdRFEgZyPHPFWXKSAQrXodLW7AHYAHJ9oLOn68EVpUPgbloqH3dsyENhM5siy
44JSSsTPWZ8AAAGgPqfpyAAABAMARzBFAiEAqrlByWF+ZYBAFAAzi7ZLnjTOA6IU
uGkYCzLMWncXm1ECIFdeIRt87Nog9NpwGYHn1HEIZ89AAh4IEW/e2pl/jv2ZMA0G
CSqGSIb3DQEBCwUAA4IBgQAcq0oa9yIdqB/UbBQibmyWuelOPzyF507AwfdzJP19
EfgXGOr0GdzQmeLHI/mGd1jgmr5TJrhgc3O8qKuzKwr77Qn1k5T+N/xcmyQnogTY
zzmMecOfwjJug4Uv3A97t26DnyIvo5KxIUOYouneZXOMZQYI4thnY9j6QiSiQlOV
TQAipHh97cVTSIIhYHDegf7ps5rDIv+CR+mLTNcrrAZbJ/LOOB+DxYUAk2EmXwTB
ObU+atWt9zP0A91p/YOR0Hi4h0y9OVGbXWxCvBV4tnlp/XONL/bzvgS8WKALM3JW
XcCGBp122LxKsh9T616mxrH5ZxrIHk/y9MKZ5LV9lLFeCr9ghs6Gan0hYZLhzNsR
Vb+fXbEnx/UOcrx3YfZGAxjSPqTyAQHngyRvH1EoaIKTHz1PLQ8Nffvsrd7tyJva
zUtlvwxDN3hFK1AbxYn8uNDiH+row65g9l1bo776F2cYi3H0HnN1nuqOmegzXDEa
dNHT2Gpv9IVHpc9+/IdP2xw=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-16T19:17:23+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Issuer
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Valid from
2022-10-21T17:02:03+00:00
Expires
2032-10-18T17:02:02+00:00
Days remaining
2193
Serial (hex)
26B9FFE4596FA61E1AF21C63D672748A
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BF:BC:39:E9:FA:2B:84:C9:A9:23:37:E2:34:4E:E2:38:1D:8D:3D:3A:E8:EA:75:EF:4E:48:E5:80:7E:D8:0C:69
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.ssl.com/repository
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-RSA.crl
subjectKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Issuer
C=US O=SecureTrust Corporation CN=SecureTrust CA
Valid from
2025-12-17T11:22:57+00:00
Expires
2029-12-30T17:22:57+00:00
Days remaining
1170
Serial (hex)
07EB4274FC1D305BE94C9883277F8467E2144F
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1B:1D:E0:69:90:CD:0B:30:5E:2E:12:48:06:10:3B:1A:DC:FF:C4:99:F2:12:50:4D:C7:7F:48:DD:0A:D6:22:09
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityKeyIdentifier
42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3 Policy: 1.3.6.1.4.1.38064.1.3.1.1 Policy: 1.3.6.1.4.1.38064.1.3.1.2 Policy: 1.3.6.1.4.1.38064.1.3.1.3 Policy: 1.3.6.1.4.1.38064.1.3.1.4 Policy: 1.3.6.1.4.1.38064.1.3.1.5 Policy: 1.3.6.1.4.1.38064.1.3.1.6
crlDistributionPoints
Full Name: URI:http://crl.sslsecuretrust.com/STCA.crl
authorityInfoAccess
OCSP - URI:http://ocsp.sslsecuretrust.com/ CA Issuers - URI:http://certs.sslsecuretrust.com/issuers/STCA.crt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →