DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

arelion.com · 75.2.80.64:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`pict.arelion.com' did not match expected CN=`arelion.com'

Certificate verification failed

Subject
C=SE L=JÖNKÖPING O=Arelion Sweden AB CN=pict.arelion.com
Issuer
C=SE O=Telia Company AB CN=Telia RSA OV CA v4
Valid from
2026-09-14T13:27:04+00:00
Expires
2027-04-01T13:27:04+00:00
Days remaining
186
Serial (hex)
01A0A0198D8638E879CA1A634D0D29
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

DNS:pict.arelion.com

SHA-256 fingerprint

3C:09:86:5E:3D:EA:8D:CF:21:84:62:50:B7:6B:73:1A:65:D4:B9:1D:74:12:2D:34:7A:63:A4:2E:04:D7:64:ED
Certificate extensions & PEM
authorityKeyIdentifier
55:D9:A3:70:82:7C:3C:DF:A8:D3:F9:DE:7F:05:D1:BA:66:4B:BF:ED
keyUsage
Digital Signature, Key Encipherment
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.271.2.3.1.1.15
subjectAltName
DNS:pict.arelion.com
crlDistributionPoints
Full Name: URI:http://httpcrl.trust.telia.com/teliarsaovcav4.crl
extendedKeyUsage
TLS Web Server Authentication
authorityInfoAccess
CA Issuers - URI:http://cps.trust.telia.com/teliarsaovcav4.cer OCSP - URI:http://ocsp.trust.telia.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Sep 14 13:27:05.244 2026 GMT Extensions: 00:00:05:00:04:65:BE:85 Signature : ecdsa-with-SHA256 30:46:02:21:00:87:B7:9B:55:40:D5:45:52:14:D3:EF: 78:D8:EC:DB:1B:08:EF:0B:51:E0:FC:C9:E0:0C:90:FD: C2:A2:4D:7A:6A:02:21:00:92:E4:0C:E8:F2:36:7A:D6: 9D:4D:A9:6A:92:96:A5:6A:85:96:C6:FE:7D:CA:69:AA: 39:6D:B3:30:89:4A:EC:2C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 14 13:27:05.311 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8A:81:87:19:7E:B1:B2:93:BA:F3:4F: 11:64:DB:46:C8:F1:01:0F:87:41:6A:C6:84:65:A9:13: 5B:AA:2F:BF:FC:02:21:00:EA:DC:68:5B:D5:00:33:DB: 99:F6:60:0E:3B:36:9A:2A:72:81:70:0D:19:31:5A:38: 24:3D:3E:67:E0:C4:03:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Sep 14 13:27:05.359 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D0:56:09:12:C7:2B:E1:A4:D0:8B:09: 08:D2:A1:54:86:1F:8A:4F:3D:33:C2:36:0B:BC:A6:9A: 60:CA:42:81:BB:02:21:00:D9:DE:F3:4F:DC:FC:C5:FB: A5:F7:AE:02:A9:5B:AE:A9:22:15:7E:46:D4:24:DE:1B: 62:33:89:FB:67:CD:D5:A0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-26T15:50:07+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=SE O=Telia Company AB CN=Telia RSA OV CA v4
Issuer
C=SE O=Telia Company AB CN=Telia RSA TLS Root CA v3
Valid from
2024-12-19T09:44:50+00:00
Expires
2048-05-23T10:00:00+00:00
Days remaining
7909
Serial (hex)
0193DE4F0C094119FB6CCB4DE38B03
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

DC:C4:EA:67:E1:B4:6C:2D:00:74:50:46:F3:FB:F3:11:5A:4E:81:9B:92:AE:E7:B9:2A:0F:8D:BA:07:96:CF:9A
Certificate extensions & PEM
authorityKeyIdentifier
B0:C7:A9:D2:DD:B2:28:56:73:04:94:8C:14:5C:48:6F:37:52:92:A8
subjectKeyIdentifier
55:D9:A3:70:82:7C:3C:DF:A8:D3:F9:DE:7F:05:D1:BA:66:4B:BF:ED
keyUsage
Certificate Sign, CRL Sign
certificatePolicies
Policy: X509v3 Any Policy
basicConstraints
CA:TRUE, pathlen:0
crlDistributionPoints
Full Name: URI:http://httpcrl.trust.telia.com/teliarsatlsrootcav3.crl
extendedKeyUsage
TLS Web Server Authentication
authorityInfoAccess
CA Issuers - URI:http://cps.trust.telia.com/teliarsatlsrootcav3.cer OCSP - URI:http://ocsp.trust.telia.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=SE O=Telia Company AB CN=Telia RSA TLS Root CA v3
Issuer
C=FI O=Telia Finland Oyj CN=Telia Root CA v2
Valid from
2024-12-19T08:43:55+00:00
Expires
2043-11-28T10:00:00+00:00
Days remaining
6271
Serial (hex)
0193DE17F68BE68D449747E0828F56
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

55:73:DF:B5:C8:94:B9:5B:85:D2:6F:9C:57:59:12:57:56:1A:09:CD:37:72:6D:13:83:5E:CA:C2:8A:1E:9C:7C
Certificate extensions & PEM
authorityKeyIdentifier
72:AC:E4:33:79:AA:45:87:F6:FD:AC:1D:9E:D6:C7:2F:86:D8:24:39
subjectKeyIdentifier
B0:C7:A9:D2:DD:B2:28:56:73:04:94:8C:14:5C:48:6F:37:52:92:A8
keyUsage
Certificate Sign, CRL Sign
certificatePolicies
Policy: X509v3 Any Policy
basicConstraints
CA:TRUE
crlDistributionPoints
Full Name: URI:http://httpcrl.trust.telia.com/teliarootcav2.crl
extendedKeyUsage
TLS Web Server Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.trust.telia.com CA Issuers - URI:http://cps.trust.telia.com/teliarootcav2.cer
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →