DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ascension.org · 151.101.67.52:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=ascension.org
Issuer
C=US O=Certainly CN=Certainly Intermediate R1
Valid from
2026-10-05T07:56:55+00:00
Expires
2026-11-04T07:56:54+00:00
Days remaining
27
Serial (hex)
79F1D65BAA20478CC2C3D422B5F5039EF5C8
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:ascension.org, DNS:www.ascension.org

SHA-256 fingerprint

60:D3:18:56:04:EE:D4:78:F5:2B:CE:C2:92:70:F4:C3:01:87:32:46:C9:25:BC:3C:5B:96:E6:47:1F:01:29:1E
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
04:06:2B:AD:11:E4:D2:1C:A8:4F:4F:11:99:CA:A7:AE:7C:13:32:B5
authorityKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityInfoAccess
CA Issuers - URI:http://int-r1.certainly.com
subjectAltName
DNS:ascension.org, DNS:www.ascension.org
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crls.certainly.com/17182262453002514/3.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 5 08:55:25.782 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D5:75:0E:21:D6:C2:23:9B:5F:CB:A7: 7F:96:C5:AB:D0:93:8B:E7:FF:EF:AA:6E:D5:22:58:92: AB:C6:22:7A:5D:02:21:00:D5:EC:16:93:4D:6E:76:07: B5:6D:D0:97:50:5E:0C:95:4D:5A:37:6D:55:CF:D4:41: B0:1B:6B:B0:FC:1C:F4:45 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Oct 5 08:55:25.816 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E0:DC:78:DA:DB:FF:1E:B3:6D:ED:E6: DE:92:3D:A9:1C:A3:FD:6B:29:54:65:2E:FE:61:F0:92: 2F:6E:46:24:E3:02:21:00:B7:9C:79:AF:9F:43:17:E8: 2F:9A:9D:61:8B:32:F3:7A:C6:BA:DD:B0:01:1B:06:F8: DA:40:00:02:11:66:25:CA
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISefHWW6ogR4zCw9QitfUDnvXIMA0GCSqGSIb3DQEBCwUA
MEUxCzAJBgNVBAYTAlVTMRIwEAYDVQQKEwlDZXJ0YWlubHkxIjAgBgNVBAMTGUNl
cnRhaW5seSBJbnRlcm1lZGlhdGUgUjEwHhcNMjYxMDA1MDc1NjU1WhcNMjYxMTA0
MDc1NjU0WjAYMRYwFAYDVQQDEw1hc2NlbnNpb24ub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAmX6u1n1XEqywSpI6+i/GdCRlmY8PwNVP1pVyVe1s
gjxkFqRjLYYegA/ska8/TBQ2c7v1r0Mqv26zC/Rx25ER3gAWPVmoInCLviiIfRoL
k5Wqifwpj/yu0wcXaLzHsdsk986SgxcbE3qgCCV0cQj+kUZUk8FP26wGsASrs+Uf
xocDUGc3tuRaldFwWlYfDOF9xuKEumgD1MdV4AJiz2L+nDQY7FGN7FCP+QQbePkU
Y2DfiaA5kplykYVXyQpcbRoSTktXNk7bcfMmlw3EMKOkC9LLiT+v/uAEgoJ/ucoW
4eIeAuClMGjVy1dzyQxsepH6ncFmakIt7UseTNXN05h42wIDAQABo4ICQDCCAjww
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFAQGK60R5NIcqE9PEZnKp658EzK1MB8GA1UdIwQYMBaAFL2X
nd+h2BslmeMMBAaJZBLXZSTHMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYb
aHR0cDovL2ludC1yMS5jZXJ0YWlubHkuY29tMCsGA1UdEQQkMCKCDWFzY2Vuc2lv
bi5vcmeCEXd3dy5hc2NlbnNpb24ub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMEIG
A1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmxzLmNlcnRhaW5seS5jb20vMTcxODIy
NjI0NTMwMDI1MTQvMy5jcmwwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDCMX5X
RRmjRe5/ON6ykEHrx8IhWiK/f9W1rXaa2Q5SzQAAAaELRmdWAAAEAwBIMEYCIQDV
dQ4h1sIjm1/Lp3+WxavQk4vn/++qbtUiWJKrxiJ6XQIhANXsFpNNbnYHtW3Ql1Be
DJVNWjdtVc/UQbAba7D8HPRFAHcAyKPEf8ezrbk1awE/anoSbeM6TkOlxkb5l605
dZkdz5oAAAGhC0ZneAAABAMASDBGAiEA4Nx42tv/HrNt7ebekj2pHKP9aylUZS7+
YfCSL25GJOMCIQC3nHmvn0MX6C+anWGLMvN6xrrdsAEbBvjaQAACEWYlyjANBgkq
hkiG9w0BAQsFAAOCAQEADq42i4NXUijiBmGZHjmFd2rEmm//vFeGNHnonCwaLxHc
Xjzuo1agUarH7HiFW9YPw6V4lEMP1Qmp3ZiBcRgXLxyjnHoSpo8ZnolTbVPkprvm
V94bOSJmuQiZHWOdyhs/qGrbfHZPPlDexWjZ67O1GRGPY3iM5Kt5wS33KV+ChlER
a0wgzYQGI1QirGAWl1OuZSHIJMP8jH36QP/ti7suJRaGf1vXwRMVrFDtJRd9IAJA
2IVLHeZTeRdIeh7/TrMTtqvzxYLhJBWlrV0aYYWcmwgXijzeYgOZA4Acv2sW6XYE
Rr052/+Bqq/xyKSNh2V+aSJTgjrJ6+he3KS3rbauZw==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-07T13:09:28+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Certainly CN=Certainly Intermediate R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2022-06-22T00:00:00+00:00
Expires
2032-06-21T23:59:59+00:00
Days remaining
2084
Serial (hex)
11831CDE4CB573E5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FE:C4:1E:32:CA:75:C2:95:A6:24:0F:A6:39:D3:AB:E3:BF:B5:CB:13:1D:66:90:E2:33:1A:17:6B:ED:2E:5B:D2
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt.cer
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.49945.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →