THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

actv8.nl · 91.235.237.45:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.actv8.nl
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2023-01-01T00:00:00+00:00
Expires
2024-01-05T23:59:59+00:00
Days remaining
-1030
Serial (hex)
90E6FEBDFA1DD1D1A7469EB2320FCE7E
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.actv8.nl, DNS:actv8.nl

SHA-256 fingerprint

C2:E1:48:38:57:3D:C6:4A:4A:47:9C:B2:A9:2A:22:BB:46:12:05:AE:F0:86:2D:5F:34:5B:C9:05:81:12:54:C3
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
A3:5D:D6:6E:91:F2:E8:A4:40:36:AC:ED:9D:09:CA:66:22:9C:57:20
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.actv8.nl, DNS:actv8.nl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Jan 1 15:41:53.048 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:63:D7:6A:8A:B0:9E:54:07:6A:AD:66:B9: DA:43:30:CA:75:12:3C:84:14:5B:93:64:E6:B6:2D:4A: 8E:47:F0:03:02:21:00:AE:F5:6C:5D:4F:D4:17:AA:1E: 67:C2:E6:78:6E:05:E3:9D:39:31:FB:0B:2E:1B:47:8D: 7B:46:DF:16:88:95:06 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Jan 1 15:41:52.991 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FB:6F:F8:E7:F2:23:16:EC:3F:F0:94: AB:BC:C8:FE:6C:5B:29:32:80:06:90:3E:CC:4A:49:AF: 95:61:96:DB:F6:02:20:2F:1E:DE:9D:51:20:1E:C2:96: A8:77:80:93:EB:3C:57:CB:4B:EE:F9:EB:63:C2:2B:D7: 2E:BF:68:9B:7C:BC:CF Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Jan 1 15:41:52.946 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:D1:E6:04:D9:AC:0B:76:5B:4B:E7: BA:E5:D3:BE:48:24:8B:70:E6:B3:9F:02:F5:AF:3F:9B: 53:B2:32:CA:50:02:20:76:1D:A7:9F:AE:AA:AB:20:DD: 30:C9:A5:B2:03:3F:EB:11:07:FE:90:3A:2E:54:50:79: 45:A4:74:32:C3:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-31T15:24:13+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1522
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →