DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

yandex.com · 5.255.255.77:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=RU ST=Moscow L=Moscow O=YANDEX LLC CN=*.yandex.by
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC E46 OV TLS CA 2025
Valid from
2026-10-05T17:06:08+00:00
Expires
2027-04-04T20:59:59+00:00
Days remaining
151
Serial (hex)
2358BA5692680BAF6613DA05
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.yandex.by, DNS:yandex.com, DNS:*.yandex.com, DNS:xn--d1acpjx3f.xn--p1ai, DNS:*.xn--d1acpjx3f.xn--p1ai, DNS:ya.ru, DNS:*.ya.ru, DNS:yandex.by

SHA-256 fingerprint

2D:61:A0:A0:04:DA:92:62:18:B2:64:F1:F4:69:9B:EA:3F:58:C8:D5:48:AD:A3:59:CC:85:1A:D5:8A:A8:FA:7D
Certificate extensions & PEM
keyUsage
Digital Signature
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgcce46ovtlsca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgcce46ovtlsca2025
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgcce46ovtlsca2025.crl
subjectAltName
DNS:*.yandex.by, DNS:yandex.com, DNS:*.yandex.com, DNS:xn--d1acpjx3f.xn--p1ai, DNS:*.xn--d1acpjx3f.xn--p1ai, DNS:ya.ru, DNS:*.ya.ru, DNS:yandex.by
authorityKeyIdentifier
2A:94:7F:C7:E0:77:BC:F3:94:2A:80:14:56:A7:80:87:38:CD:4A:B2
extendedKeyUsage
TLS Web Server Authentication
subjectKeyIdentifier
B4:17:50:0A:3C:9E:F4:FF:A3:B6:EE:4F:43:23:A4:B8:20:94:F5:DE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Oct 5 17:06:11.668 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:58:0E:91:18:4B:B5:A7:48:25:24:08:AC: A8:3A:93:C7:E5:BE:26:7A:23:D8:D9:EC:E7:CC:FB:23: 48:DA:46:2F:02:20:5F:CE:37:77:F2:22:DD:66:84:A1: 3D:1B:67:93:19:83:05:93:C7:09:9F:FF:DF:D6:81:71: 4E:7C:D3:71:C4:DD Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Oct 5 17:06:11.649 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C7:17:FB:E3:3E:38:45:01:28:8C:82: 8D:97:3B:69:1F:EC:85:BE:1A:C4:0B:B2:18:02:57:62: 54:94:03:1D:77:02:21:00:9A:B1:E5:F9:3C:24:AC:87: 15:B1:AA:95:80:41:EC:C2:FF:F0:CE:C4:8D:E6:A1:7C: 62:BE:59:C8:72:4F:40:EE Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Oct 5 17:06:11.481 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:30:69:AD:DA:07:54:35:86:FD:2C:F4:4A: 5F:1C:D1:9B:4B:EC:C8:64:6C:18:C5:96:0D:0B:DD:21: 64:9B:5B:C7:02:21:00:F7:3E:05:82:8B:FD:13:DC:66: C4:A0:FB:86:5C:00:08:70:B6:2A:52:70:EA:1E:AE:E1: 44:BA:E2:3B:2F:0E:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-04T02:30:02+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC E46 OV TLS CA 2025
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Root E46
Valid from
2025-09-17T02:56:24+00:00
Expires
2029-06-23T00:00:00+00:00
Days remaining
961
Serial (hex)
844358B3B93F5386DEA5EFDE030B8B30
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

66:F8:15:D7:92:5C:BB:25:37:BF:EA:A2:4A:00:41:F7:DD:EF:90:E5:D4:71:7B:16:C2:1C:CC:04:47:A5:B6:FB
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
2A:94:7F:C7:E0:77:BC:F3:94:2A:80:14:56:A7:80:87:38:CD:4A:B2
authorityKeyIdentifier
31:0A:90:8F:B6:C6:9D:D2:44:4B:80:B5:A2:E6:1F:B1:12:4F:1B:95
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/roote46 CA Issuers - URI:http://secure.globalsign.com/cacert/roote46.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/roote46.crl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Root E46
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2019-11-20T00:00:00+00:00
Expires
2029-03-18T00:00:00+00:00
Days remaining
864
Serial (hex)
75A8BADA4FDF4482FA33C4F0F394F84B
Signature
RSA-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1D:F6:05:4D:66:41:40:46:33:64:1B:B5:FA:37:42:FD:A7:D0:75:E2:51:48:40:AB:61:E0:0C:CB:BB:7D:34:1D
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
31:0A:90:8F:B6:C6:9D:D2:44:4B:80:B5:A2:E6:1F:B1:12:4F:1B:95
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →