DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

zain.com · 192.124.249.7:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=zain.com
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Valid from
2026-09-20T14:07:32+00:00
Expires
2026-12-19T14:07:32+00:00
Days remaining
87
Serial (hex)
7F901229124E690C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:zain.com, DNS:www.zain.com

SHA-256 fingerprint

5F:61:7B:5D:34:3F:31:73:BD:FA:E3:07:76:C5:C6:CE:FA:D0:3F:D7:9D:C2:22:DB:A2:5A:57:F8:81:F0:5D:9D
Certificate extensions & PEM
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
keyUsage
Digital Signature, Key Encipherment
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfr1v1dv_s1-1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.16.840.1.114414.1.7.23.1 CPS: http://certificates.starfieldtech.com/repository/
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_issuing_dv-r1v1.crt OCSP - URI:http://ocsp.starfieldtech.com/
authorityKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
subjectAltName
DNS:zain.com, DNS:www.zain.com
subjectKeyIdentifier
F8:19:AB:E5:5A:7E:10:FE:7E:32:02:72:39:19:36:9E:DE:09:CF:62
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Sep 20 14:07:32.589 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:12:08:94:96:6B:C5:5D:44:75:45:8F:0F: 68:B1:38:1A:44:A2:0C:C5:B3:0B:DD:D5:BD:E8:82:FE: 47:C7:E8:52:02:20:35:43:47:C6:BE:87:5E:A5:C0:59: D6:25:41:0C:87:17:E7:A0:E1:46:FA:6E:DF:47:EB:64: B5:F1:FD:3C:0A:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 20 14:07:32.947 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FB:BD:E8:E1:01:E9:2C:E2:20:65:E4: F9:5D:21:AC:DB:30:9F:03:29:CE:E9:18:C6:A7:05:0A: AC:17:EE:7E:8D:02:21:00:A9:07:5E:A8:24:9E:95:94: 25:B2:20:E8:F7:EB:91:C4:10:40:6B:22:39:E4:7C:26: 3C:B1:E2:77:AC:94:A9:10 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 20 14:07:33.278 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F2:04:38:B3:B4:63:98:13:74:1E:95: 53:4A:C7:A1:68:E2:6C:95:08:6E:58:57:64:87:37:90: B3:DD:3E:02:A9:02:21:00:93:AF:FB:8E:E9:33:94:8B: 54:7A:FA:A0:C7:A2:7D:93:9D:17:0A:3C:40:7D:3C:6F: 52:C5:CA:4C:DA:55:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T23:29:13+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Valid from
2025-08-27T12:00:00+00:00
Expires
2040-08-23T11:59:59+00:00
Days remaining
5083
Serial (hex)
C5E225A10DF67804EC5305DCF38E5234
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

06:89:1C:34:A2:E4:68:7C:63:0B:29:85:0C:C9:F6:D4:5D:ED:39:49:1C:F8:77:C7:24:6B:6E:C6:33:58:7A:2C
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
authorityKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_root-r1.crt
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sf_tls_root-r1.crl 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2025-09-24T12:00:00+00:00
Expires
2037-12-31T23:59:59+00:00
Days remaining
4118
Serial (hex)
466702AA31941FA2C196EFE6D09BAF6C
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

26:A9:3D:60:03:90:77:65:4C:0D:DA:1F:B6:34:AF:5F:F5:C1:14:C7:AC:1F:D0:44:9B:1C:9D:21:78:B0:28:FF
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE
subjectKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →