DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

as1101.net · 145.220.76.100:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
C=NL ST=Utrecht O=SURF B.V. CN=as1101.net
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Organization Validation Secure Server CA
Valid from
2024-09-01T00:00:00+00:00
Expires
2025-09-01T23:59:59+00:00
Days remaining
-401
Serial (hex)
9EC56519125E1E40A409792B45D1BC0D
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:as1101.net

SHA-256 fingerprint

53:FA:B1:0C:9B:AF:0D:EE:B0:81:C2:D4:B2:AB:C7:A5:4B:1C:57:A7:E9:2C:0A:A2:F3:19:A4:89:A0:78:FF:11
Certificate extensions & PEM
authorityKeyIdentifier
17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
subjectKeyIdentifier
B3:44:09:4F:37:69:92:4B:AB:FB:A1:2F:B5:BB:73:6F:ED:A1:33:F8
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:as1101.net
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Sep 1 04:03:38.013 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:E2:8D:CA:9D:0F:EA:38:7F:20:26:00: D2:2B:7A:95:6B:BD:A5:B7:E0:55:08:31:61:8F:7F:2A: BB:78:0E:4B:02:20:45:AC:ED:4C:D7:1C:43:76:67:4E: 7D:BE:43:0E:88:AA:D2:7F:31:24:60:40:14:2A:C4:A7: 6A:37:89:A0:39:BA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC: 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34 Timestamp : Sep 1 04:03:37.924 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:10:14:70:23:7F:B7:65:50:D4:15:01:40: 2F:54:FC:C4:7E:4F:63:71:30:25:17:A4:88:A5:A1:CC: B6:A6:5C:B3:02:21:00:C2:ED:4C:A6:EC:A3:CD:43:30: 88:09:8D:6C:BB:E4:CD:BC:23:AE:18:F1:F8:6C:E3:11: ED:4E:4B:66:8B:41:D0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Sep 1 04:03:37.903 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A1:D6:49:8C:6B:99:31:F9:FA:35:E6: C3:84:FD:F7:DE:62:2A:CB:02:12:14:2F:A9:36:0E:0F: A3:94:8F:EC:E7:02:21:00:F9:8D:B4:8C:41:02:75:60: 34:C0:48:2D:E3:64:77:A1:2C:DE:89:10:3B:67:A1:4C: B0:76:11:22:D4:61:DF:09
-----BEGIN CERTIFICATE-----
MIIGujCCBaKgAwIBAgIRAJ7FZRkSXh5ApAl5K0XRvA0wDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yNDA5MDEwMDAwMDBaFw0yNTA5MDEyMzU5NTlaMEgxCzAJBgNV
BAYTAk5MMRAwDgYDVQQIEwdVdHJlY2h0MRIwEAYDVQQKEwlTVVJGIEIuVi4xEzAR
BgNVBAMTCmFzMTEwMS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGkU+vG48sD4w4d5BqbnKac/6vZ4QYVOLO1xOpb+CAdAeQnHN/beoJNBL9UxZ6
dG2hXN/dhLJyJzsXF1qMuk7PrrzZUhNcw33+Vme/AAKx26/JbaY5n0QbQZF2l8eh
ru/TNlJEjVNkcy7pRA1InSxjZbJKtCM/CcbmAtaYq3emj9xHAF4pfhwvc0mQprus
aAviLVHK/JLYnTulpuAo9d8nxZVEcCtbLfn0KXprNKBVg4kkOdhyKA3a3koYMVDO
uxiY+pY4pFwoMPKgDK/h1BDIY6v1DbObm3ACJRgO+MOe6cI3oy7tnJcI2sWPZnUs
0zGyTezPSPbb+mqfjSnvECIXAgMBAAGjggNPMIIDSzAfBgNVHSMEGDAWgBQX2dYl
J2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQUs0QJTzdpkkur+6Evtbtzb+2hM/gw
DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYB
BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8E
UzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdh
bml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcB
AQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGln
b1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYI
KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMBUGA1UdEQQOMAyCCmFz
MTEwMS5uZXQwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AN3cyjSV1+EWBeeV
MvrHn/g9HFDf2wA6FBJ2Ciysu8gqAAABkavAsZ0AAAQDAEYwRAIgT+KNyp0P6jh/
ICYA0it6lWu9pbfgVQgxYY9/Krt4DksCIEWs7UzXHEN2Z059vkMOiKrSfzEkYEAU
KsSnajeJoDm6AHYADeHyMCvTDcFAYhIJ6lUu/Ed0fLHX6TDvDkIetH5OqjQAAAGR
q8CxRAAABAMARzBFAiAQFHAjf7dlUNQVAUAvVPzEfk9jcTAlF6SIpaHMtqZcswIh
AMLtTKbso81DMIgJjWy75M28I64Y8fhs4xHtTktmi0HQAHcAEvFONL1TckyEBhnD
jz96E/jntWKHiJxtMAWE6+WGJjoAAAGRq8CxLwAABAMASDBGAiEAodZJjGuZMfn6
NebDhP333mIqywISFC+pNg4Po5SP7OcCIQD5jbSMQQJ1YDTASC3jZHehLN6JEDtn
oUywdhEi1GHfCTANBgkqhkiG9w0BAQsFAAOCAQEAJXkjCSyfmUUVHS2NrThdjr8j
7PQrCm0HWbi/SGUY4QMg89HsdjLCaqrCMeTLqi/O+9hP+I/y8JW7ClhGeC+KdGTZ
q9xsKSnBG2M8YMaR3EZfT43cRcXulVfnQ8+B9XW74GOxrsQ/lC034LRToJ4UQYgq
sV48ZqBj/EP6IZQ8QbJTGYFLlYovVquwhZPORrgb1iPbXg2Yv1go1Z1gjXSNI1zS
TvewP49SBDhyNeBePlSrEMdOoItjxsD1zyQwv3uqgQlPqsxWAlx2DY/icVOLz+lq
FHHpMNRfjDaZW6JQbkjtRiF8fZ128DlKU6O20w00pxK9n+NXr4b44ELZLp+iJg==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-07T06:10:33+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Organization Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1546
Serial (hex)
137D539CAA7C31A9A433701968847A8D
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

72:A3:4A:C2:B4:24:AE:D3:F6:B0:B0:47:55:B8:8C:C0:27:DC:CC:80:6F:DD:B2:2B:4C:D7:C4:77:73:97:3E:C0
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
816
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →