DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

aviso.ci · 41.66.15.205:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `aviso.ci'

Certificate verification failed

Subject
CN=*.orange.ci
Issuer
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Valid from
2026-09-07T11:05:34+00:00
Expires
2027-03-24T11:14:26+00:00
Days remaining
163
Serial (hex)
3FD86983F4AA7B734FF9F3212D01A3C0
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.orange.ci, DNS:orange.ci

SHA-256 fingerprint

A0:A1:04:F8:34:78:D3:20:71:BF:90:A9:FA:AB:FD:89:A0:C8:E1:96:48:49:E0:1D:DB:22:D4:E2:7B:53:06:69
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-I-RSA-R1.cer OCSP - URI:http://ocsps.ssl.com
subjectAltName
DNS:*.orange.ci, DNS:orange.ci
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.38064.1.3.1.1
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSL.com-TLS-I-RSA-R1.crl
subjectKeyIdentifier
7E:2D:20:16:D5:19:E9:22:C7:5A:46:0F:3B:D3:DE:AB:20:E6:76:2D
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 7 11:15:35.839 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:57:DA:5A:8C:C2:0F:81:63:D0:05:B9:B6: 14:30:5B:AF:85:10:08:18:39:43:31:3E:7E:96:3A:B6: C5:4B:79:B7:02:21:00:CD:D1:14:A0:FA:E4:34:5E:9B: DB:A1:94:0E:3A:23:4A:F4:A3:33:3C:96:F8:35:AE:77: 49:08:22:8A:8F:2D:6C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Sep 7 11:15:35.818 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:41:48:82:E6:D6:1E:5E:F5:CB:EC:BC:32: C4:3F:78:03:BB:7B:AA:23:56:6D:0F:8E:25:E5:2A:BE: 72:B0:21:33:02:20:12:2A:41:22:7C:E1:06:E5:D9:94: 81:EA:DF:69:56:4D:7C:1F:33:71:A7:6D:E7:10:31:96: 89:EF:1A:4B:5A:30 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 7 11:15:35.835 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F1:AF:B0:30:E3:AA:37:6B:4C:F9:A3: 28:75:2C:2E:AC:EF:AE:4E:ED:E2:C5:92:E9:11:91:38: 20:83:8F:9E:B2:02:21:00:D8:D5:03:7D:50:CA:3A:30: FB:4D:80:CE:9E:89:A4:89:87:EF:8C:16:E0:0A:12:3C: 42:C2:85:66:18:74:36:48
-----BEGIN CERTIFICATE-----
MIIGZzCCBM+gAwIBAgIQP9hpg/Sqe3NP+fMhLQGjwDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSYwJAYDVQQD
DB1TU0wuY29tIFRMUyBJc3N1aW5nIFJTQSBDQSBSMTAeFw0yNjA5MDcxMTA1MzRa
Fw0yNzAzMjQxMTE0MjZaMBYxFDASBgNVBAMMCyoub3JhbmdlLmNpMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNcfH8Hup8llQdph1DuByMIEnS1rJS1x
AhZL5Thtv5c5MC6/JlE62Fh0b2ZiqsoGy7GDoUK+8KOX/ULQdHiBmu6zMlQjmTMR
gDjosRmQ6DiCzfsxSp31F5xyRcjxnsdpBjRSBixIfX/AGPdsaivbZ8aSP3a3Oo9Z
I9uHdUfmCf2UTeV5daYt+cx9jAcmLKiTsueR19wzi/7NK3NxKX/eWhUZcSI+UzWa
Eh6PATmw6kkTl7blTu3qiNMESNpVaCmeAsOBnRzRHX3x2b03+O+LLJFNMwVAoB20
M3wOCTYYZXH5brCYd3Ua7v2CVfTHdQhxu3Iwl05a3vh9a5DeGNviIwIDAQABo4IC
9jCCAvIwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBR5upR3oA0Z3TTmOaT8TKXS
Wm31jDBqBggrBgEFBQcBAQReMFwwOAYIKwYBBQUHMAKGLGh0dHA6Ly9jZXJ0LnNz
bC5jb20vU1NMLmNvbS1UTFMtSS1SU0EtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRw
Oi8vb2NzcHMuc3NsLmNvbTAhBgNVHREEGjAYggsqLm9yYW5nZS5jaYIJb3Jhbmdl
LmNpMCMGA1UdIAQcMBowCAYGZ4EMAQIBMA4GDCsGAQQBgqkwAQMBATAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDov
L2NybHMuc3NsLmNvbS9TU0wuY29tLVRMUy1JLVJTQS1SMS5jcmwwHQYDVR0OBBYE
FH4tIBbVGekix1pGDzvT3qsg5nYtMA4GA1UdDwEB/wQEAwIFoDCCAX4GCisGAQQB
1nkCBAIEggFuBIIBagFoAHYATGPcmOWcHauI9h6KPd6uj6tEozd7X5uUw/uhnPzB
viYAAAGge5SrHwAABAMARzBFAiBX2lqMwg+BY9AFubYUMFuvhRAIGDlDMT5+ljq2
xUt5twIhAM3RFKD65DRem9uhlA46I0r0ozM8lvg1rndJCCKKjy1sAHUARqI5Z8YN
tkaHxm89+ZmUdpOmphEghFfVVefj0KHZtkYAAAGge5SrCgAABAMARjBEAiBBSILm
1h5e9cvsvDLEP3gDu3uqI1ZtD44l5Sq+crAhMwIgEipBInzhBuXZlIHq32lWTXwf
M3GnbecQMZaJ7xpLWjAAdwAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9Z
nwAAAaB7lKsbAAAEAwBIMEYCIQDxr7Aw46o3a0z5oyh1LC6s765O7eLFkukRkTgg
g4+esgIhANjVA31Qyjow+02Azp6JpImH74wW4AoSPELChWYYdDZIMA0GCSqGSIb3
DQEBCwUAA4IBgQCKIonpIDvPJhTYVw0ChdybFB6OesJd8ME6gtzgdATFPrbCM+i4
lIryo6fFuDUIVr+dnxnzCWRqzFk5n6B3TQKNsjeyLv5GdLerOjwdkhFm+ydNGPeJ
3ydDlahheHibBPeFIPtlAKmAB2DRtQzNB7dvTJIqKMCpHxfkI0BwmP9SiW2fiPDq
J6WbHEOKbTQp5bAsI9n543cwK9GqxHmwN3evfOabZBiwoo35ssgGLxaLoLAaqzNP
XHSbRV3GBfwbbFY705K2XKtJejsjnc/m+gPYhaef78NDkE5G0qc7L8ll3me976Yr
PWjjGqUKqnAePo9pKKxlOxit4iOUFtG2dyEY7T3WrXHxwUdFm9xEM3/Wrddvk080
SQYlw47dgafS0kmbvqr02/4bV/Zu9Ub3DWkAfiY9B6K0ZZow+lDODaR9OKKY7cOy
rPuHpOCDByEhS+6ISsDXARXzF3xQXvnphrG33CwaknGk2dSRhTzfKpOseVSXAwh/
6KIQdJK7fSNPwpI=
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-11T20:02:11+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Issuer
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Valid from
2022-10-21T17:02:03+00:00
Expires
2032-10-18T17:02:02+00:00
Days remaining
2198
Serial (hex)
26B9FFE4596FA61E1AF21C63D672748A
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BF:BC:39:E9:FA:2B:84:C9:A9:23:37:E2:34:4E:E2:38:1D:8D:3D:3A:E8:EA:75:EF:4E:48:E5:80:7E:D8:0C:69
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.ssl.com/repository
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-RSA.crl
subjectKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Issuer
C=US O=SecureTrust Corporation CN=SecureTrust CA
Valid from
2025-12-17T11:22:57+00:00
Expires
2029-12-30T17:22:57+00:00
Days remaining
1175
Serial (hex)
07EB4274FC1D305BE94C9883277F8467E2144F
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1B:1D:E0:69:90:CD:0B:30:5E:2E:12:48:06:10:3B:1A:DC:FF:C4:99:F2:12:50:4D:C7:7F:48:DD:0A:D6:22:09
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityKeyIdentifier
42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3 Policy: 1.3.6.1.4.1.38064.1.3.1.1 Policy: 1.3.6.1.4.1.38064.1.3.1.2 Policy: 1.3.6.1.4.1.38064.1.3.1.3 Policy: 1.3.6.1.4.1.38064.1.3.1.4 Policy: 1.3.6.1.4.1.38064.1.3.1.5 Policy: 1.3.6.1.4.1.38064.1.3.1.6
crlDistributionPoints
Full Name: URI:http://crl.sslsecuretrust.com/STCA.crl
authorityInfoAccess
OCSP - URI:http://ocsp.sslsecuretrust.com/ CA Issuers - URI:http://certs.sslsecuretrust.com/issuers/STCA.crt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →