DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

10086.cn · 183.207.44.251:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=Beijing L=Beijing O=China Mobile Information Technology Co.,Ltd. CN=*.10086.cn
Issuer
C=CN O=UniTrust CN=SHECA OV Server CA G5
Valid from
2025-10-13T10:44:40+00:00
Expires
2026-11-13T15:59:59+00:00
Days remaining
50
Serial (hex)
56E9227FD89F5D00F742263FD677026A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.10086.cn, DNS:10086.cn

SHA-256 fingerprint

BE:C9:A4:11:AF:10:75:F3:74:54:80:E3:D7:83:23:CD:7A:C9:8B:FD:2D:51:A7:A0:67:9D:81:32:57:0A:AB:94
Certificate extensions & PEM
authorityKeyIdentifier
03:79:A3:8D:52:5F:D4:E9:88:92:1F:43:58:54:25:02:F4:87:8B:7E
subjectKeyIdentifier
B2:7C:42:BB:79:86:AC:BF:88:C0:2A:68:07:E7:AC:8C:FE:E7:3F:62
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.2.156.112570.1.1.2 Policy: 2.23.140.1.2.2
subjectAltName
DNS:*.10086.cn, DNS:10086.cn
basicConstraints
CA:FALSE
crlDistributionPoints
Full Name: URI:http://crl.global.sheca.com/ovscag5.crl
authorityInfoAccess
OCSP - URI:http://ocsp.global.sheca.com/ovscag5 CA Issuers - URI:http://certs.global.sheca.com/ovscag5.cer
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Oct 13 10:44:42.167 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:39:DF:DC:BE:0A:CF:63:95:17:78:F6:C4: 2A:8D:6D:5B:73:2D:46:97:63:83:79:E6:A5:2C:7C:2D: B7:B6:90:E5:02:20:12:EC:3E:C7:BD:40:D1:72:66:50: 9B:2D:1E:0F:38:77:6E:5C:3B:BB:67:8D:01:43:89:BD: 8F:08:97:F1:A2:6E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Oct 13 10:44:42.479 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2B:D8:B7:CF:D2:E2:ED:C9:FB:DA:7D:4F: C9:C5:22:F5:3E:34:78:AC:6C:21:E6:F1:64:E0:D2:A0: 9D:66:77:82:02:20:6B:4E:66:81:94:1F:4D:03:C5:FA: E4:E4:59:74:F9:E5:C3:18:AD:F4:6D:54:45:40:E9:58: 37:B9:A9:8C:D3:75 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Oct 13 10:44:43.230 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1C:41:E0:D6:7C:61:18:86:8C:A1:C8:07: 5E:F0:62:AF:61:2E:36:E2:39:1F:CF:8B:D1:70:8A:D3: 38:C3:90:33:02:21:00:8A:BB:48:EE:32:CF:91:7C:32: 39:75:D8:0E:40:DD:A8:A5:A3:C3:1A:AE:75:89:01:F6: 1A:64:93:64:76:3C:2F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-24T01:26:05+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=CN O=UniTrust CN=SHECA OV Server CA G5
Issuer
C=CN O=UniTrust CN=UCA Global G2 Root
Valid from
2021-03-16T16:00:00+00:00
Expires
2036-03-16T15:59:59+00:00
Days remaining
3461
Serial (hex)
59D39D9525A71EE9907FC1722B989E72
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8A:B3:A0:AC:F2:89:E6:EF:75:4B:E4:49:23:68:43:D6:7F:45:C1:91:BD:DD:66:48:4B:85:E6:E6:05:56:A9:AF
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl.global.sheca.com/root/globalg2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.global.sheca.com/globalg2 CA Issuers - URI:http://certs.global.sheca.com/globalg2.cer
authorityKeyIdentifier
81:C4:8C:CC:F5:E4:30:FF:A5:0C:08:5F:8C:15:67:21:74:01:DF:DF
subjectKeyIdentifier
03:79:A3:8D:52:5F:D4:E9:88:92:1F:43:58:54:25:02:F4:87:8B:7E
certificatePolicies
Policy: 1.2.156.112570.1.1.2 CPS: https://www.sheca.com/repository Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=CN O=UniTrust CN=UCA Global G2 Root
Issuer
C=PL O=Unizeto Technologies S.A. OU=Certum Certification Authority CN=Certum Trusted Network CA
Valid from
2024-01-08T11:07:19+00:00
Expires
2029-01-06T11:07:19+00:00
Days remaining
835
Serial (hex)
1D8A6FC17A0C81BCA26C435AEFA50078
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BB:61:40:8A:ED:9F:53:0B:2E:C0:54:5E:53:BA:2C:8E:BE:AA:57:D9:97:64:47:DB:16:63:CE:D4:60:0C:D6:B7
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:1
subjectKeyIdentifier
81:C4:8C:CC:F5:E4:30:FF:A5:0C:08:5F:8C:15:67:21:74:01:DF:DF
authorityKeyIdentifier
08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
keyUsage
Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://certum.crl.sheca.com/ctnca.crl Full Name: URI:http://subca.crl.certum.pl/ctnca.crl
authorityInfoAccess
OCSP - URI:http://subca.ocsp-certum.com CA Issuers - URI:http://repository.certum.pl/ctnca.cer
certificatePolicies
Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →