DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

a1.mk · 212.15.182.153:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.a1.mk
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV E36
Valid from
2026-05-04T00:00:00+00:00
Expires
2026-11-18T23:59:59+00:00
Days remaining
29
Serial (hex)
22C501B0FC105DEEC341840F9F7658B6
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.a1.mk, DNS:a1.mk

SHA-256 fingerprint

A9:B1:52:8D:3F:B2:BC:0A:CE:9A:79:21:D3:B9:84:EB:BF:3C:1A:A1:E7:BD:F1:0C:FF:95:27:C6:31:81:37:86
Certificate extensions & PEM
authorityKeyIdentifier
17:99:A8:04:C1:6F:E4:2D:70:A8:0A:10:3D:03:D3:E9:1A:B8:26:63
subjectKeyIdentifier
D2:1F:A3:ED:BC:92:A3:BE:10:A4:6B:D5:28:D5:EA:13:AD:E0:45:15
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVE36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.a1.mk, DNS:a1.mk
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : May 4 15:21:57.472 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2D:95:66:B9:7A:E5:FB:C2:DC:F5:13:D6: FF:46:D4:B0:A3:B3:1C:36:FD:D2:D6:73:0F:2A:73:65: AB:E6:51:F9:02:20:4C:AB:CC:43:EA:02:28:61:3C:97: 53:D1:AB:C6:57:5F:0B:6D:AA:F3:C9:87:1B:6F:CF:63: B4:F2:47:D4:14:5F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : May 4 15:21:57.529 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C3:1B:34:D0:91:5A:A6:29:0B:2A:5F: B4:34:F4:19:FA:D0:5B:FF:4A:8A:02:78:E1:70:BD:DB: 53:37:B9:A5:1F:02:21:00:EE:20:6C:E2:44:85:D2:9B: 4E:FA:50:F7:7F:11:20:3F:17:BF:4F:01:17:E7:A7:6C: 3B:86:F1:84:46:66:10:15 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : May 4 15:21:58.151 2026 GMT Extensions: 00:00:05:00:09:FE:3C:B4 Signature : ecdsa-with-SHA256 30:45:02:20:55:EE:26:17:E7:00:B9:22:AC:3A:57:CF: CD:EF:49:E2:BD:F0:11:4E:78:6B:CD:AB:31:C4:8C:C5: 5D:B3:05:4E:02:21:00:AA:E5:B5:A4:88:D9:8F:8D:C4: 32:0C:8F:50:6F:9A:BD:B4:C7:63:09:22:78:AB:96:13: AF:D7:43:2E:B9:DD:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-ECDSA-AES128-GCM-SHA256 · Checked 2026-10-20T20:47:34+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV E36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3440
Serial (hex)
36E059ED888DD57AEDD570B6727F9BDA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:3F:0B:A8:0E:3A:C2:22:65:6D:FD:04:15:8C:C1:5C:29:27:D4:2D:5D:05:F0:1D:EE:4A:47:EB:43:A9:16:DF
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
17:99:A8:04:C1:6F:E4:2D:70:A8:0A:10:3D:03:D3:E9:1A:B8:26:63
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4108
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4108
Serial (hex)
5C8B99C55A94C5D27156DECD8980CC26
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4F:F4:60:D5:4B:9C:86:DA:BF:BC:FC:57:12:E0:40:0D:2B:ED:3F:BC:4D:4F:BD:AA:86:E0:6A:DC:D2:A9:AD:7A
Certificate extensions & PEM
subjectKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →