DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

aon.at · 193.81.82.81:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=aon.at
Issuer
C=DE O=EUNETIC GmbH CN=EUNETIC RSA Domain Validation Secure Server CA 3
Valid from
2024-02-13T00:00:00+00:00
Expires
2025-02-12T23:59:59+00:00
Days remaining
-590
Serial (hex)
FEE229C717EE0902426C700657F599C7
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

DNS:aon.at, DNS:www.aon.at

SHA-256 fingerprint

99:05:9A:52:78:A9:99:B4:07:2A:AB:2B:16:8F:B5:CB:34:BB:BF:31:5E:0A:AD:D0:63:19:B2:CD:76:B9:B2:C2
Certificate extensions & PEM
authorityKeyIdentifier
37:9C:DA:21:6A:3C:6E:90:87:9D:EB:E4:24:4B:24:CB:53:65:A4:81
subjectKeyIdentifier
65:0B:58:CA:C6:A1:3C:B1:48:0F:F7:5D:F5:E2:D6:54:D1:0B:1E:FC
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.107 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/EUNETICRSADomainValidationSecureServerCA3.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:aon.at, DNS:www.aon.at
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9: 1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08 Timestamp : Feb 13 11:25:10.072 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2B:96:B2:1B:11:92:3B:01:34:93:99:B7: 12:6C:00:49:BA:B2:7A:60:03:CC:44:3B:27:F2:98:CA: 74:FD:29:A8:02:21:00:8E:81:3C:F6:34:9D:6C:82:38: FC:8D:F6:A5:DD:A7:43:98:4A:7D:0F:2A:0F:E1:1A:EF: 64:3E:6E:60:E8:BB:A4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Feb 13 11:25:10.659 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:66:C3:E5:40:18:D4:17:73:6B:8B:90:9D: 4C:7E:8A:78:C3:94:90:7C:D8:39:24:28:31:07:ED:E4: A6:3D:07:FA:02:20:31:5C:87:4D:5C:DD:87:AF:B0:2D: BC:50:26:06:42:E7:8A:09:9C:5F:01:B0:ED:52:0A:B3: 2C:16:55:2B:B7:FB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Feb 13 11:25:10.100 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CA:76:28:B0:DE:7C:DA:DB:FD:6F:92: 40:47:79:48:A1:4A:33:4D:06:1A:8A:95:02:2B:A5:98: 10:C1:CE:4A:3B:02:20:17:C1:54:84:A0:3F:4E:50:0B: 30:74:F4:B8:D4:F2:62:FD:AF:EB:52:6E:9D:E4:08:2A: F7:11:16:D5:56:2D:D2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-25T10:28:07+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=DE O=EUNETIC GmbH CN=EUNETIC RSA Domain Validation Secure Server CA 3
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2023-08-02T00:00:00+00:00
Expires
2033-08-01T23:59:59+00:00
Days remaining
2502
Serial (hex)
BFAE4EA8EC9A26F51C1E32BD845B5D76
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

43:5C:C6:60:3E:9C:F5:0E:76:E0:ED:03:41:AB:80:BC:21:53:8E:3B:8A:F6:83:24:DA:5A:A1:77:EE:48:95:37
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
37:9C:DA:21:6A:3C:6E:90:87:9D:EB:E4:24:4B:24:CB:53:65:A4:81
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.107 Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
828
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →