DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

21cn.com · 114.217.37.13:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=上海市 O=天翼数字生活科技有限公司 CN=*.21cn.com
Issuer
C=CN O=WoTrus CA Limited CN=WoTrus OV Server CA [Run by the Issuer]
Valid from
2025-10-27T00:00:00+00:00
Expires
2026-11-27T23:59:59+00:00
Days remaining
66
Serial (hex)
95700DC06F51B6C9813558B18ED7062C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.21cn.com, DNS:21cn.com

SHA-256 fingerprint

0B:6A:E0:86:49:C2:E1:C4:B8:D4:EE:A2:79:C2:15:1F:75:A4:7E:3A:83:CE:F7:A7:6C:9F:43:B9:57:C6:70:DC
Certificate extensions & PEM
authorityKeyIdentifier
0D:49:8F:15:33:7B:C0:4F:B6:FB:3A:38:09:FC:34:15:DA:60:DD:14
subjectKeyIdentifier
A6:DC:E2:E0:BE:21:D6:5F:7D:63:66:AE:10:61:54:DD:1A:F3:DF:E0
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.22 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.crlocsp.cn/WoTrusOVServerCA_2.crl
authorityInfoAccess
CA Issuers - URI:http://aia.crlocsp.cn/WoTrusOVServerCA_2.crt OCSP - URI:http://ocsp.crlocsp.cn
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Oct 27 02:42:29.060 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0A:80:2C:DD:38:36:2C:E9:0A:B2:48:6D: 29:C1:71:C8:32:B6:B6:D6:AA:13:50:58:A8:5F:54:7E: FD:51:6D:B2:02:20:2B:EC:43:36:B1:F2:F7:A1:CE:1C: 65:CD:2F:18:30:90:15:FD:3F:02:F6:09:18:10:FD:D9: DB:4F:92:D8:44:B6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Oct 27 02:42:29.122 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:98:B0:01:0B:3A:80:A8:7B:36:91:C0: F4:B0:3E:A6:FA:10:EA:A3:51:A0:32:51:60:9D:8B:42: D8:63:53:A7:5C:02:20:3C:1B:13:33:91:3A:66:B6:F5: F5:77:3D:C3:56:03:6F:E0:BB:2A:7B:EC:BA:F6:59:4C: E3:C0:F1:87:2D:5E:16 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Oct 27 02:42:28.927 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:47:0B:28:C9:14:0D:D1:1E:5F:00:77: C4:74:74:12:A2:9E:EA:A2:A8:FA:08:1A:38:CB:3D:78: FC:74:7C:2B:02:20:07:8D:87:3E:41:43:C5:D9:E0:59: 67:B9:11:14:01:9F:20:E5:8B:54:6B:04:DD:FC:F3:92: 58:2A:34:99:5C:40
subjectAltName
DNS:*.21cn.com, DNS:21cn.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T10:53:51+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=CN O=WoTrus CA Limited CN=WoTrus OV Server CA [Run by the Issuer]
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2020-01-08T00:00:00+00:00
Expires
2030-01-07T23:59:59+00:00
Days remaining
1203
Serial (hex)
1D082954384CBF74AF69B991169BF02D
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

0E:D9:96:3E:1B:BA:04:17:E1:FC:17:BD:38:E9:20:61:F9:65:11:3B:92:1C:B3:57:F1:31:F1:2F:08:53:45:57
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
0D:49:8F:15:33:7B:C0:4F:B6:FB:3A:38:09:FC:34:15:DA:60:DD:14
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.22 Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
831
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →