DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

carnet.hr · 193.198.233.173:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=HR ST=Grad Zagreb L=Zagreb O=Hrvatska akademska i istraživačka mreža CARNET CN=carnet.hr
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
Valid from
2025-12-24T08:50:28+00:00
Expires
2026-12-24T08:50:28+00:00
Days remaining
90
Serial (hex)
636C4ED14BB8D85ACF06F0EA7CD80F06
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:carnet.hr, DNS:www.carnet.hr

SHA-256 fingerprint

3C:9B:CE:D9:52:58:A6:8D:3C:7E:2E:E0:7C:BF:8E:72:85:48:1D:FB:D0:E5:5D:D2:58:0B:81:6E:6E:9E:0A:BB
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer OCSP - URI:http://ocsp-tls.harica.gr
subjectAltName
DNS:carnet.hr, DNS:www.carnet.hr
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
subjectKeyIdentifier
76:FA:84:B8:1B:7A:69:00:B5:F9:28:10:84:02:B0:5A:31:C7:45:48
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Dec 24 09:00:30.176 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A6:F1:9B:AF:7A:B4:17:DE:75:E9:D4: E4:28:22:A8:CB:A7:7F:54:93:DB:B9:0A:76:9D:0B:B2: 45:EF:26:77:D9:02:20:7E:94:98:60:A6:3E:E0:B3:B0: C6:76:DB:32:96:ED:11:02:2E:89:68:73:C2:74:4E:58: 5F:19:02:B4:D3:F3:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Dec 24 09:00:30.173 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:AF:54:3E:BB:6A:70:69:4D:10:1C:2D: F9:54:BA:F0:59:27:41:64:F5:59:D5:4D:CB:3F:38:D4: 32:3C:EC:A1:02:21:00:BC:CE:13:3F:BF:C2:B6:35:9E: 4C:D3:00:5A:A0:05:52:A8:1F:B3:A1:F5:DE:DC:14:20: C9:B4:CC:70:45:47:2F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Dec 24 09:00:30.122 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FB:C4:59:D9:F2:F4:87:59:BA:4A:18: 12:32:0D:B4:2B:24:79:8A:9F:AF:4C:7D:9F:3E:70:1F: DC:27:C4:E3:D3:02:21:00:84:59:9B:69:1A:0E:C9:F5: C6:7A:AC:83:69:49:1F:3E:C8:5A:C1:D6:53:3A:93:7F: 2A:E0:D7:69:B2:25:0C:92
-----BEGIN CERTIFICATE-----
MIIG+TCCBWGgAwIBAgIQY2xO0Uu42FrPBvDqfNgPBjANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAx
MB4XDTI1MTIyNDA4NTAyOFoXDTI2MTIyNDA4NTAyOFowgYQxCzAJBgNVBAYTAkhS
MRQwEgYDVQQIDAtHcmFkIFphZ3JlYjEPMA0GA1UEBwwGWmFncmViMTowOAYDVQQK
DDFIcnZhdHNrYSBha2FkZW1za2EgaSBpc3RyYcW+aXZhxI1rYSBtcmXFvmEgQ0FS
TkVUMRIwEAYDVQQDDAljYXJuZXQuaHIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCR6JnH2l9ran1oE4XyCYYF1fRvKwXRM1Ak0skEksnEc2TrkxBhIVYm
cdGwazsPuNy+ARCotYnYzNNh2x7oOk4Htmjqgvlbu9kKCeTilXN6zBgXbRTlN8qO
jmZZI1F4woYkkgtpkP5ahLF1BsWvvfU2KlGQSL0yoF3qYZpGTtehrPgXNkaHg3s7
jI0ZL2f1G+j0RlE8lc6Zw8+1WtxquVfDElaiiPf78Vxfp1ipO14mCjFiMMUD6GTh
uAsqBeJRrbMMnbIPp9/hT2bAqM65F47aQK7e6o698x9/gPSipwAHPM2J4asDvot5
xwqCDYmf2/pQwpnBWw1CxsAkZGVjl+NvAgMBAAGjggMIMIIDBDAMBgNVHRMBAf8E
AjAAMB8GA1UdIwQYMBaAFIYBcj+MqXDiMQZTFs4BX1t5yDw7MG8GCCsGAQUFBwEB
BGMwYTA4BggrBgEFBQcwAoYsaHR0cDovL2NydC5oYXJpY2EuZ3IvSEFSSUNBLUdF
QU5ULVRMUy1SMS5jZXIwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLXRscy5oYXJp
Y2EuZ3IwIwYDVR0RBBwwGoIJY2FybmV0Lmhygg13d3cuY2FybmV0LmhyMC0GA1Ud
IAQmMCQwCAYGZ4EMAQICMAgGBgQAj3oBBzAOBgwrBgEEAYHPEQEBAQIwHQYDVR0l
BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6
Ly9jcmwuaGFyaWNhLmdyL0hBUklDQS1HRUFOVC1UTFMtUjEuY3JsMB0GA1UdDgQW
BBR2+oS4G3ppALX5KBCEArBaMcdFSDAOBgNVHQ8BAf8EBAMCBaAwggF/BgorBgEE
AdZ5AgQCBIIBbwSCAWsBaQB2AJROQ4f67MHvgfMZJCaoGGUBx9NfOAIBP3JnfVU3
LhnYAAABm0+WoGAAAAQDAEcwRQIhAKbxm696tBfedenU5CgiqMunf1ST27kKdp0L
skXvJnfZAiB+lJhgpj7gs7DGdtsylu0RAi6JaHPCdE5YXxkCtNPzawB2ANdtfRDR
p/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABm0+WoF0AAAQDAEcwRQIgXa9U
PrtqcGlNEBwt+VS68FknQWT1WdVNyz841DI87KECIQC8zhM/v8K2NZ5M0wBaoAVS
qB+zofXe3BQgybTMcEVHLwB3ANgJVTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7
RUsUAAABm0+WoCoAAAQDAEgwRgIhAPvEWdny9IdZukoYEjINtCskeYqfr0x9nz5w
H9wnxOPTAiEAhFmbaRoOyfXGeqyDaUkfPshawdZTOpN/KuDXabIlDJIwDQYJKoZI
hvcNAQELBQADggGBAIvXLEcNOeM3bkmjutUiLSewW/5AVTSU11Wjzvk1nhcUd73o
rc8PSVo8JZPRQb8RX6vByiRuWBF0ZGycFuJ0cPuAberhK1FK6lu13YZQlrW7KBfL
Cr79CCcjNkl+k6giaIvF0oK98M0s9X480XGaktbRYIVCVRSX+Qj2QbovoZEfCP0l
qC8hrEtxaH3SlVQwNq9aLTpOA+FO+5NVyCwz4uE6MkW3kbBH10oQXYs3VaSWp0MV
zw33iRVpCWTv+XKsyqlMYAi0LFjA1i+xtq1qBD1LSBc910GHLkDnrQ7DAVNjDXez
tP9v0XBHb5ns3KQwoCve8WLJhfv4+H+4zllGU/wDYxFKG/PgJ7hM9YD8TYMiKjeA
J573b4jnowEdcMsIXlN5XJH/OXJBTAL9ZlNGMbPZ+8hm5n0xGvvLV7y8sE6Dcypz
qheCkHyGPHz1CRcoURnO3we0Mj0WFzNPMv7H/L7GiuApd6SmWH1SYQVQL5eqfvOY
hxXVX/JvXv9ZIFRMbg==
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-25T02:03:26+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
Valid from
2025-01-03T11:15:00+00:00
Expires
2039-12-31T11:14:59+00:00
Days remaining
4845
Serial (hex)
14D57BF3692228219A5567FA91651B22
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

5B:67:8D:C4:40:95:A5:28:95:B6:3B:31:F2:72:27:F4:B3:6C:3E:34:74:91:BF:2B:FA:69:18:37:A5:FB:8C:79
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
subjectKeyIdentifier
86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----
MIIGBTCCA+2gAwIBAgIQFNV782kiKCGaVWf6kWUbIjANBgkqhkiG9w0BAQsFADBs
MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg
Um9vdCBDQSAyMDIxMB4XDTI1MDEwMzExMTUwMFoXDTM5MTIzMTExMTQ1OVowYDEL
MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl
YXJjaCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBSU0EgMTCC
AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKEEaZSzEzznAPk8IEa17GSG
yJzPTj4cwRY7/vcq2BPT5+IRGxQtaCdgLXIEl2cdPdIkj2eyakFmgMjAtyeju8V8
dRayQCD/bWjJ7thDlowgLljQaXirxnYbT8bzRHAhCZqBakYgi5KWw9dANLyDHGpX
UdY259ab0lWEaFE5Uu6IzQSMJOAy4l/Twym8GUiy0qMDEBFSlm31C9BXpdHKKAlh
vIjMiKoDeTWl5vZaLB2MMRGY1yW2ftPgIP0/MkX1uFITlvHmmMTngxplH1nybEIJ
FiwHg1KiLk1TprcZgeO2gxE5Lz3wTFWrsUlAzrh5xWmscWkjNi/4BpeuiT5+NExF
czboLnXOfjuci/7bsnPi1/aZN/iKNbJRnngFoLaKVMmqCS7Xo34f+BITatryQZFE
u2oDKExQGlxDBCfYMLgLucX/onpLzUSgeQITNLx6i5tGGbUYH+9Dy3GI66L/5tPj
qzlOsydki8ZYGE5SBJeWCZ2IrhUe0WzZ2b6Zhk6JAQIDAQABo4IBLTCCASkwEgYD
VR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQKSCOmYKSSCjPqk1vFV+olTb0S
7jBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jcnQuaGFyaWNh
LmdyL0hBUklDQS1UTFMtUm9vdC0yMDIxLVJTQS5jZXIwEQYDVR0gBAowCDAGBgRV
HSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg
NaAzhjFodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtVExTLVJvb3QtMjAyMS1S
U0EuY3JsMB0GA1UdDgQWBBSGAXI/jKlw4jEGUxbOAV9becg8OzAOBgNVHQ8BAf8E
BAMCAYYwDQYJKoZIhvcNAQELBQADggIBABkssjQzYrOo4GMsKegaChP16yNe6Sck
cWBymM455R2rMeuQ3zlxUNOEt+KUfgueOA2urp4j6TlPbs/XxpwuN3I1f09Luk5b
+ZgRXM7obE6ZLTerVQWKoTShyl34R2XlK8pEy7+67Ht4lcJzt+K6K5gEuoPSGQDP
ef+fUfmXrFcgBMcMbtfDb9dubFKNZZxo5nAXiqhFMOIyByag3H+tOTuH8zuId9pH
RDsUpAIHJ9/W2WBfLcKav7IKRlNBRD/sPBy903J9WHPKwl8kQSDA+aa7XCYk7bJt
Eyf+7GM9F5cZ7+YyknXqnv/rtQEkTKZdQo5Us18VFe9qqj94tXbLdk7PejJYNB4O
Zlli44Ld7rtqfFlUych7gIxFOmiyxMQQYrYmUi+74lEZvfoNhuref0CupuKpz6O3
dLv6kO9T10uNdDBoBQTkge3UzHafTIe3R2o3ujXKUGPwyc9m7/FETyKLUCwSU/5O
AVOeBCU8QtkKKjM8AmbpKpe3pHWcyq3R7B3LmIALkMPTydyDfxen65IDqREbVq8N
xjhkJThUz40JqOlN6uqKqeDISj/IoucYwsqW24AlO7ZzNmohQmMi8ep23H4hBSh0
GBTe2XvkuzaNf92syK8l2HzO+13GLCjzYLTPvXTO9UpK8DGyfGZOuamuwbAnbNpE
3RfjV9IaUQGJ
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
Issuer
C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions RootCA 2015
Valid from
2021-09-02T07:41:55+00:00
Expires
2029-08-31T07:41:54+00:00
Days remaining
1071
Serial (hex)
2A6086D4D4DE45C95E4B98FBBF2FBF26
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4A:CD:8D:C6:02:0A:54:5A:85:89:43:A5:53:B5:E0:F3:FC:5B:85:9A:EA:17:46:65:0D:69:CF:12:10:F9:56:D8
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
71:15:67:C8:C8:C9:BD:75:5D:72:D0:38:18:6A:9D:F3:71:24:54:0B
authorityInfoAccess
CA Issuers - URI:http://repo.harica.gr/certs/HaricaRootCA2015.crt
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HaricaRootCA2015.crl
subjectKeyIdentifier
0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →