DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

btcl.com.bd · 123.49.12.155:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=btcl.gov.bd
Issuer
C=US O=Let's Encrypt CN=R11
Valid from
2024-12-09T03:58:39+00:00
Expires
2025-03-09T03:58:38+00:00
Days remaining
-583
Serial (hex)
04651A836D28D73AD5C8F4FC4EC7FBDCEB74
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:btcl.com.bd, DNS:btcl.gov.bd, DNS:www.btcl.com.bd, DNS:www.btcl.gov.bd

SHA-256 fingerprint

9B:CC:28:28:B2:7B:E6:84:A8:79:78:76:E4:49:77:33:4C:3E:4D:08:3D:C8:FC:EF:78:86:30:76:46:0D:68:CE
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
C2:DD:D4:2C:20:4D:1F:55:36:C0:6E:EE:FE:31:45:00:0D:C6:69:32
authorityKeyIdentifier
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
OCSP - URI:http://r11.o.lencr.org CA Issuers - URI:http://r11.i.lencr.org/
subjectAltName
DNS:btcl.com.bd, DNS:btcl.gov.bd, DNS:www.btcl.com.bd, DNS:www.btcl.gov.bd
certificatePolicies
Policy: 2.23.140.1.2.1
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Dec 9 04:57:09.382 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:09:06:29:17:1A:30:14:54:E7:02:38:BF: 4B:F2:EA:5F:E8:77:88:1E:A7:D1:E5:51:88:36:44:F9: 85:B7:7D:6C:02:21:00:D0:E1:A0:C8:19:AD:F2:6B:A7: CD:47:17:D5:93:79:7D:74:20:11:1B:31:4C:A1:49:59: 35:B4:7E:30:8D:7D:2A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Dec 9 04:57:09.409 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E6:AC:57:D5:36:B5:95:96:C5:AF:CF: 7F:DC:46:BA:4B:C7:1C:1D:5B:0E:B3:28:CA:C3:60:5E: B7:F5:64:DD:85:02:20:5C:86:8D:BA:CE:6B:9B:A7:A2: 32:F6:04:48:36:BD:69:5A:2B:BD:1B:F3:0E:9C:5C:00: EA:37:00:6A:4D:96:4A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-10-12T07:28:09+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R11
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
151
Serial (hex)
8A7D3E13D62F30EF2386BD29076B34F8
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

59:1E:9C:E6:C8:63:D3:A0:79:E9:FA:BE:14:78:C7:33:9A:26:B2:12:69:DD:E7:95:21:13:61:02:4A:E3:1A:44
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →