DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

calstatela.edu · 130.182.1.116:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `calstatela.edu'

Certificate verification failed

Subject
C=US ST=California O=California State University, Los Angeles CN=*.calstatela.edu
Issuer
C=US O=Internet2 CN=InCommon RSA Server CA 2
Valid from
2026-03-09T00:00:00+00:00
Expires
2027-04-09T23:59:59+00:00
Days remaining
169
Serial (hex)
A775407E2258B5C1F5CE90953BACDA79
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.calstatela.edu

SHA-256 fingerprint

60:A6:53:85:30:9F:11:71:29:8D:FF:9D:DE:4F:79:81:D3:96:CB:22:CB:21:F2:2F:43:79:53:53:C7:9C:78:AD
Certificate extensions & PEM
authorityKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
subjectKeyIdentifier
12:74:46:35:CA:12:F2:6F:BA:3E:A4:EE:F5:1C:F3:30:8E:31:23:51
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonRSAServerCA2.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonRSAServerCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.calstatela.edu
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Mar 9 18:59:43.082 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:B8:27:6F:5E:F0:2F:DE:22:3A:04:80: 0F:7E:8E:70:A6:40:99:82:B9:DB:D5:B0:5E:5E:18:F2: 64:42:9A:29:02:20:13:D2:34:87:E2:17:C3:42:30:F0: 09:74:D6:03:99:AD:1E:6E:A9:3E:FA:ED:7E:51:08:EB: BF:59:E0:2A:CF:01 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Mar 9 18:59:43.774 2026 GMT Extensions: 00:00:05:00:03:0F:87:02 Signature : ecdsa-with-SHA256 30:46:02:21:00:BD:0B:1D:DA:C6:EF:F9:B7:72:9F:26: 59:47:77:91:36:2D:6A:BA:2E:FC:4F:B7:51:88:B6:22: 09:50:96:69:0C:02:21:00:CD:8D:90:C1:4A:47:8F:21: 17:05:63:68:5A:8F:22:52:57:F7:26:30:CB:88:C9:25: 68:75:29:3C:DB:72:7E:32 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Mar 9 18:59:43.034 2026 GMT Extensions: 00:00:05:00:00:34:95:C7 Signature : ecdsa-with-SHA256 30:45:02:21:00:85:67:C0:9B:54:2A:35:83:8B:54:A9: 91:CD:27:35:13:E0:35:F3:60:0B:C4:B7:E6:26:35:E5: C5:C3:E3:F2:5A:02:20:49:C8:70:1A:45:CB:31:6C:75: 9D:28:3B:26:94:F5:83:17:42:B8:D6:5D:5D:45:2F:A8: 2B:AF:63:DA:FA:E2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-22T19:18:48+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Internet2 CN=InCommon RSA Server CA 2
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2022-11-16T00:00:00+00:00
Expires
2032-11-15T23:59:59+00:00
Days remaining
2216
Serial (hex)
835B7615206D2D6E097E0B6E409FEFC0
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:E0:1C:C4:DD:0C:9D:92:A3:DB:D4:90:92:FF:13:F9:CD:38:74:45:CD:C5:7E:5B:98:4E:1B:77:21:B5:B0:29
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →