DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

banestes.com.br · 2.16.6.225:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=Espirito Santo L=VITORIA O=BANESTES SA BANCO DO ESTADO DO ESPIRITO SANTO CN=*.banestes.com.br
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-06-19T00:00:00+00:00
Expires
2027-01-03T23:59:59+00:00
Days remaining
51
Serial (hex)
029659E2A47C35CF2590493826E8D9D6
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.banestes.com.br, DNS:banestes.com.br

SHA-256 fingerprint

4E:CC:2B:B2:09:6B:4F:D7:72:64:CB:7C:EB:56:87:F3:CB:A4:1C:DD:6E:46:7A:1F:3D:4A:A7:4D:96:44:F6:0E
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
87:2B:C6:5A:6E:22:64:EC:17:D9:1A:79:65:81:03:62:C4:FF:58:E6
subjectAltName
DNS:*.banestes.com.br, DNS:banestes.com.br
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jun 19 00:07:01.805 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:21:00:C0:D5:F4:06:79:49:47:79:FE:BD:ED: FD:1F:4C:C5:9D:CD:A4:74:DF:09:02:31:0F:D1:5A:2E: 26:2F:41:E7:FA:02:1F:71:9B:F6:FD:A7:50:60:17:70: 75:C8:12:99:BA:70:00:DB:D8:BC:E0:13:C7:2B:B2:07: 50:B5:59:0E:1D:65 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Jun 19 00:07:01.779 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:2D:DC:97:E9:26:D0:DD:08:55:02: 54:EB:21:1D:70:D8:E8:F4:A5:A9:B3:3D:E5:7F:C9:02: 8D:AB:65:BB:7B:02:21:00:FC:08:0E:DB:FD:BD:02:40: FF:2D:E1:6D:30:4B:11:1A:56:AF:AF:DE:51:06:60:C9: B8:D7:5F:E9:AC:BA:30:67 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jun 19 00:07:01.979 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4D:AB:74:63:D7:CF:B0:35:D4:1B:37:83: 5B:E8:AA:44:7D:4D:B3:B3:60:E8:7C:12:09:34:64:02: 6D:D6:ED:05:02:21:00:97:03:D2:11:59:E5:47:D7:12: FE:E6:2D:09:5C:4D:F1:F1:50:35:D1:30:FB:78:B0:88: F2:3F:0D:99:A5:75:E1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-13T22:44:32+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1612
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →