DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

bkns.vn · 103.121.88.5:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=VN jurisdictionST=Hanoi businessCategory=Private Organization serialNumber=0104850587 C=VN ST=Hanoi O=Bach Kim Network Solutions Joint Stock Company CN=www.bkns.vn
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2025-11-28T00:00:00+00:00
Expires
2026-12-02T23:59:59+00:00
Days remaining
61
Serial (hex)
07ABF0FC9B29183F2C59354030F33A7D
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.bkns.vn, DNS:bkns.vn

SHA-256 fingerprint

A1:2D:1F:44:C7:99:55:09:CA:73:27:08:42:C5:BC:DD:03:14:29:C4:E4:62:22:5F:00:DB:34:A2:57:6E:D2:E9
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
90:8E:27:A7:39:4C:C2:DF:D2:99:F8:18:96:1F:6C:C7:BE:83:4D:B1
subjectAltName
DNS:www.bkns.vn, DNS:bkns.vn
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 28 02:21:14.311 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:62:52:A0:86:7C:6D:68:E1:66:C8:4C:87: 4B:77:BA:3E:ED:D8:C6:D5:C0:5B:90:AB:95:F5:A5:F5: 6A:16:4A:3F:02:21:00:F4:F8:7A:65:C5:D4:9A:16:28: EF:BA:E0:7C:E4:AD:6B:32:FB:5E:E3:F4:D0:25:A1:0D: F0:5A:F4:8F:C1:9A:78 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Nov 28 02:21:14.371 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:91:28:A0:32:D0:D6:1B:52:34:93:A4: 1E:B2:E0:30:0F:E2:3D:11:62:3B:9C:3D:48:08:49:0F: 69:A1:4D:E9:40:02:21:00:B8:B4:0B:A1:FC:62:F0:5B: D2:17:C8:FD:92:75:5A:C3:A0:08:C9:EB:69:77:91:04: C0:DE:23:87:01:B8:B2:60 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 28 02:21:14.374 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0D:12:51:C6:EB:3E:F6:16:6C:89:94:10: 49:47:0B:1B:75:1E:7A:A4:F2:90:03:CA:6D:06:CA:29: AB:77:F2:A2:02:21:00:BD:38:26:FD:F6:A4:F3:BF:36: DF:75:79:33:05:B5:1A:1C:EC:3A:CB:6F:5C:2D:45:49: 0A:63:89:92:5C:BC:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-02T03:56:51+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1369
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIQAWePH++IIlXYsKcOa3uyIDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMDA3MDIxMjQyNTBaFw0zMDA3MDIxMjQyNTBaMEQxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxHjAcBgNVBAMTFURpZ2lDZXJ0IEVWIFJT
QSBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0eZsx/neTr
f4MXJz0R2fJTIDfN8AwUAu7hy4gI0vp7O8LAAHx2h3bbf8wl+pGMSxaJK9ffDDCD
63FqqFBqE9eTmo3RkgQhlu55a04LsXRLcK6crkBOO0djdonybmhrfGrtBqYvbRat
xenkv0Sg4frhRl4wYh4dnW0LOVRGhbt1G5Q19zm9CqMlq7LlUdAE+6d3a5++ppfG
cnWLmbEVEcLHPAnbl+/iKauQpQlU1Mi+wEBnjE5tK8Q778naXnF+DsedQJ7NEi+b
QoonTHEz9ryeEcUHuQTv7nApa/zCqes5lXn1pMs4LZJ3SVgbkTLj+RbBov/uiwTX
tkBEWawvZH8CAwEAAaOCAgswggIHMB0GA1UdDgQWBBRqTlC/mGidW3sgddRZAXlI
ZpIyBjAfBgNVHSMEGDAWgBROIlQgGJXm427mD/r6uRLtBhePOTAOBgNVHQ8BAf8E
BAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQI
MAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA3oDWgM4YxaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDCBzgYD
VR0gBIHGMIHDMIHABgRVHSAAMIG3MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMIGKBggrBgEFBQcCAjB+DHxBbnkgdXNlIG9mIHRoaXMg
Q2VydGlmaWNhdGUgY29uc3RpdHV0ZXMgYWNjZXB0YW5jZSBvZiB0aGUgUmVseWlu
ZyBQYXJ0eSBBZ3JlZW1lbnQgbG9jYXRlZCBhdCBodHRwczovL3d3dy5kaWdpY2Vy
dC5jb20vcnBhLXVhMA0GCSqGSIb3DQEBCwUAA4IBAQBSMgrCdY2+O9spnYNvwHiG
+9lCJbyELR0UsoLwpzGpSdkHD7pVDDFJm3//B8Es+17T1o5Hat+HRDsvRr7d3MEy
o9iXkkxLhKEgApA2Ft2eZfPrTolc95PwSWnn3FZ8BhdGO4brTA4+zkPSKoMXi/X+
WLBNN29Z/nbCS7H/qLGt7gViEvTIdU8x+H4l/XigZMUDaVmJ+B5d7cwSK7yOoQdf
oIBGmA5Mp4LhMzo52rf//kXPfE3wYIZVHqVuxxlnTkFYmffCX9/Lon7SWaGdg6Rc
k4RHhHLWtmz2lTZ5CEo2ljDsGzCFGJP7oT4q6Q8oFC38irvdKIJ95cUxYzj4tnOI
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4123
Serial (hex)
033AF1E6A711A9A0BB2864B11D09FAE5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →