DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

cez.cz · 89.111.76.144:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=CZ businessCategory=Private Organization serialNumber=264 70 411 C=CZ L=Praha O=ČEZ ICT Services, a. s. CN=www.cez.cz
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-06-03T00:00:00+00:00
Expires
2026-12-18T23:59:59+00:00
Days remaining
45
Serial (hex)
0DED5F17FDF3848F58E02DF2EEA0FD14
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:www.cez.cz, DNS:cez.cz

SHA-256 fingerprint

F4:FB:F8:06:76:31:97:7E:BA:47:67:5A:4A:2F:22:BF:7C:10:93:E8:35:D6:27:D6:D8:DB:58:FA:D9:0D:8F:1A
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
C3:7E:74:09:A8:FA:92:BC:A2:36:9B:62:D8:5B:ED:7A:67:36:92:D0
subjectAltName
DNS:www.cez.cz, DNS:cez.cz
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Jun 3 08:30:46.135 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:8C:89:AE:5D:50:AA:F1:22:A7:DA:20: 17:39:8E:02:7F:F8:38:97:02:29:36:61:50:01:3D:C5: 9B:B8:2B:13:03:02:20:14:C5:14:D3:B2:F5:0E:6A:EA: DF:5D:23:C3:86:C5:21:7F:31:E0:D9:B4:B3:CF:E8:C0: 8C:46:81:61:AC:AC:42 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 3 08:30:46.111 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D6:35:4D:8F:B2:F9:4F:4E:19:26:24: 75:66:11:86:A9:5B:F8:C1:E8:7A:C9:82:23:A4:AC:BD: 05:99:A3:1A:5A:02:20:74:A0:9C:DC:D0:DC:81:A9:17: B4:11:24:9C:33:DC:F7:55:5D:1C:C0:27:60:AE:0F:D8: 01:77:5D:6F:C2:57:07 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Jun 3 08:30:46.145 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5C:BB:9E:61:25:16:87:32:BB:C2:88:E3: D3:54:48:34:40:2E:5B:E8:2E:FA:A9:99:5E:1E:72:AD: 10:A6:7E:62:02:21:00:D1:22:75:BA:2D:A9:27:3E:85: 48:B0:64:4B:23:A2:9A:D1:60:10:E7:43:29:D9:78:31: 66:85:92:74:D6:9F:5B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-03T04:04:14+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1622
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →