DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

189.cn · 117.89.29.19:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=北京市 O=中国电信股份有限公司全渠道运营中心 CN=*.189.cn
Issuer
C=US O=DigiCert, Inc. CN=DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1
Valid from
2026-07-31T00:00:00+00:00
Expires
2027-02-14T23:59:59+00:00
Days remaining
145
Serial (hex)
0EDCD464D886960FDCD328353F5F382A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.189.cn, DNS:189.cn

SHA-256 fingerprint

51:54:21:04:06:58:83:E5:DF:06:23:88:76:63:64:2A:4A:9E:F2:9A:5E:38:84:DA:C8:D4:03:34:45:B9:1B:B0
Certificate extensions & PEM
authorityKeyIdentifier
2B:23:16:81:1B:47:89:8A:90:7A:EC:E8:32:D4:6C:8E:72:F9:CE:25
subjectKeyIdentifier
BD:06:9D:4F:D9:A7:AB:4A:38:34:9E:96:BF:ED:96:B2:A5:77:15:1A
subjectAltName
DNS:*.189.cn, DNS:189.cn
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertSecureSiteOVG2TLSCNRSA4096SHA2562022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertSecureSiteOVG2TLSCNRSA4096SHA2562022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jul 31 03:44:40.810 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:45:36:76:94:59:C1:10:AE:E2:AA:46:06: 82:57:AE:3B:9A:C7:2C:B4:0E:25:41:B7:36:F3:48:AA: EE:50:09:C8:02:20:37:63:FA:85:6E:6C:E6:1A:A5:95: 01:7A:DA:76:86:77:0B:50:DF:F6:8E:75:67:3F:D6:B8: B7:10:54:F6:20:5B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Jul 31 03:44:40.782 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6D:2C:23:B7:2B:95:4C:B6:F2:3E:D0:E0: 98:07:1A:3E:31:60:37:BD:58:2E:F0:E6:B3:ED:D4:67: 7D:51:F3:43:02:21:00:92:08:08:DC:3B:8B:ED:27:5F: 99:8E:2F:45:87:17:0D:3C:9F:B2:FB:41:17:F6:E3:D3: 56:D7:91:30:37:E5:68 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 31 03:44:40.847 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:05:5B:88:C1:7B:17:D6:D7:42:CB:A0:A8: DB:8A:07:DA:FA:F4:67:05:75:27:D8:D5:91:5F:6D:5D: BD:CC:F4:06:02:20:45:BE:6E:8A:CC:38:C9:8B:8A:27: 2D:8E:FE:7F:14:85:07:75:32:18:1C:DD:4A:1B:ED:34: 72:30:87:60:FE:3F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-22T04:36:50+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert, Inc. CN=DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-12-15T00:00:00+00:00
Expires
2032-12-14T23:59:59+00:00
Days remaining
2275
Serial (hex)
04C1B960191FCABEDCDA9301A6CD78C3
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7C:D6:CD:D2:5E:EE:25:12:AA:F1:41:9A:FD:44:C1:46:C4:3A:A1:09:3D:5A:60:D4:ED:39:EF:BD:DA:81:5A:D4
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
2B:23:16:81:1B:47:89:8A:90:7A:EC:E8:32:D4:6C:8E:72:F9:CE:25
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
Valid from
2024-01-18T00:00:00+00:00
Expires
2031-11-09T23:59:59+00:00
Days remaining
1874
Serial (hex)
0FE032AB844D033106C50C8E13C8B068
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
authorityKeyIdentifier
03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →