DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

xtom.sg · 92.118.188.8:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=xtom.sg
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Valid from
2026-10-07T00:00:00+00:00
Expires
2027-01-05T23:59:59+00:00
Days remaining
75
Serial (hex)
5A89AEB7DDFF73EE4FEECAD435FDD382
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:xtom.sg, DNS:*.xtom.sg

SHA-256 fingerprint

F2:17:81:E0:4C:E7:22:49:BE:39:AF:D0:AC:99:15:A6:1B:AF:ED:53:79:1E:F4:F5:42:67:2D:70:7D:B5:75:53
Certificate extensions & PEM
authorityKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
subjectKeyIdentifier
12:8A:BE:F0:98:4B:EF:0D:48:B4:BF:F6:AF:9B:2F:9C:23:13:33:51
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLECCDVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:xtom.sg, DNS:*.xtom.sg
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 25:B7:EF:DE:A1:13:01:93:ED:93:07:97:70:AA:32:2A: 26:62:0D:E3:5A:C8:AA:7C:75:19:7D:E0:B1:A9:E0:65 Timestamp : Oct 7 19:59:53.247 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:37:24:D1:65:BB:01:04:EA:41:D6:08:BD: 9C:51:74:53:41:A9:C3:96:73:A3:34:F8:8C:BD:06:AF: 36:B6:EB:2D:02:20:34:8C:CE:87:91:71:5B:22:85:05: F5:C6:39:41:02:02:47:AE:46:29:5E:A7:37:AB:F7:77: 79:B4:FD:3C:24:63 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:81:00:18:73:4E:17:6E:1D:47:E0:95:40:F3:81:BA: 54:66:97:CD:63:A8:43:50:71:6E:B8:09:4E:DA:F1:0D Timestamp : Oct 7 19:59:53.654 2026 GMT Extensions: 00:00:05:00:1E:CC:23:36 Signature : ecdsa-with-SHA256 30:44:02:20:0D:07:0C:2B:1B:5F:FC:36:1E:2C:F7:6E: 46:2A:2B:E7:7D:0A:CB:DF:08:E1:5E:53:C1:04:43:C2: 6E:5C:B9:1B:02:20:14:70:99:6B:2D:40:96:DA:B0:0E: 47:29:4E:BD:D7:23:80:09:FE:B7:B8:AD:2F:31:5B:9D: 31:D7:4F:78:B7:EF
-----BEGIN CERTIFICATE-----
MIIDgDCCAyegAwIBAgIQWomut93/c+5P7srUNf3TgjAKBggqhkjOPQQDAjBGMQsw
CQYDVQQGEwJBVDEVMBMGA1UEChMMWmVyb1NTTCBHbWJIMSAwHgYDVQQDExdaZXJv
U1NMIEVDQyBEViBTU0wgQ0EgMjAeFw0yNjEwMDcwMDAwMDBaFw0yNzAxMDUyMzU5
NTlaMBIxEDAOBgNVBAMTB3h0b20uc2cwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC
AARBBcD51QFZwSpGbSqMpIJ7KvLht1joJaiTE+TtWk/yg8sM0ientMs8neb4SSeg
McIJ0QtuP0hyuWdjOv3nkbb6o4ICKTCCAiUwHwYDVR0jBBgwFoAUlEWf2lFHcdVz
rqwdqwhyEm2tfGIwHQYDVR0OBBYEFBKKvvCYS+8NSLS/9q+bL5wjEzNRMA4GA1Ud
DwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMG4GCCsGAQUFBwEBBGIwYDA5BggrBgEFBQcwAoYt
aHR0cDovL2NydC5zZWN0aWdvLmNvbS9aZXJvU1NMRUNDRFZTU0xDQTIuY3J0MCMG
CCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAdBgNVHREEFjAUggd4
dG9tLnNnggkqLnh0b20uc2cwggEKBgorBgEEAdZ5AgQCBIH7BIH4APYAdQAlt+/e
oRMBk+2TB5dwqjIqJmIN41rIqnx1GX3gsangZQAAAaEX83OfAAAEAwBGMEQCIDck
0WW7AQTqQdYIvZxRdFNBqcOWc6M0+Iy9Bq82tustAiA0jM6HkXFbIoUF9cY5QQIC
R65GKV6nN6v3d3m0/TwkYwB9AKKBABhzThduHUfglUDzgbpUZpfNY6hDUHFuuAlO
2vENAAABoRfzdTYACAAABQAezCM2BAMARjBEAiANBwwrG1/8Nh4s925GKivnfQrL
3wjhXlPBBEPCbly5GwIgFHCZay1AltqwDkcpTr3XI4AJ/re4rS8xW50x1094t+8w
CgYIKoZIzj0EAwIDRwAwRAIgPLJgn0LW0l3mwdODFBzggD8XAeT/6gns8yzdxJhM
CZkCIDIw8dp9mcCiIvSpEbN5l2UdQWz7ZuGWj1KY5Ijo1XqD
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-22T10:26:06+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3258
Serial (hex)
C4E1C5BB00F0278F347BE4F85D63FCCA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BE:C8:4F:CE:0D:AA:42:3F:3B:3E:ED:38:EA:48:06:6C:C5:61:8F:52:44:AD:65:CD:9F:86:24:A8:13:FA:4C:3D
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4106
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIDRjCCAsugAwIBAgIQGp6v7G3o4ZtcGTFBto2Q3TAKBggqhkjOPQQDAzCBiDEL
MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl
eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT
JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMjEwMzIy
MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjBfMQswCQYDVQQGEwJHQjEYMBYGA1UEChMP
U2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIg
QXV0aGVudGljYXRpb24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAR2
+pmpbiDt+dd34wc7qNs9Xzjoq1WmVk/WSOrsfy2qw7LFeeyZYX8QeccCWvkEN/U0
NSt3zn8gj1KjAIns1aeibVvjS5KToID1AZTc8GgHHs3u/iVStSBDHBv+6xnOQ6Oj
ggEgMIIBHDAfBgNVHSMEGDAWgBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAdBgNVHQ4E
FgQU0SLaTFnxS18mOKqd1u7rDcP7qWEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB
/wQFMAMBAf8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEGA1UdIAQK
MAgwBgYEVR0gADBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVz
dC5jb20vVVNFUlRydXN0RUNDQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwNQYI
KwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu
Y29tMAoGCCqGSM49BAMDA2kAMGYCMQCMCyBit99vX2ba6xEkDe+YO7vC0twjbkv9
PKpqGGuZ61JZryjFsp+DFpEclCVy4noCMQCwvZDXD/m2Ko1HA5Bkmz7YQOFAiNDD
49IWa2wdT7R3DtODaSXH/BiXv8fwB9su4tU=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →