DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

citra.net.id · 202.65.113.188:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.citra.net.id
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2025-12-29T00:00:00+00:00
Expires
2027-01-09T23:59:59+00:00
Days remaining
102
Serial (hex)
A5E89E383C36463C934BE692FD241B55
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.citra.net.id, DNS:citra.net.id

SHA-256 fingerprint

F8:35:53:47:03:23:26:31:A1:FE:72:6C:EB:74:22:28:48:20:55:39:F7:21:5A:F7:51:9C:7D:0E:85:DE:82:E4
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
98:C2:C0:84:7C:A3:02:ED:CD:45:1A:D0:C6:B6:E8:B4:20:82:79:25
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.citra.net.id, DNS:citra.net.id
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Dec 29 08:25:07.617 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4E:B0:80:F3:C7:56:DF:1C:62:34:32:77: E3:63:8D:38:A1:76:C2:66:5D:6B:00:40:3E:C2:C8:78: BD:7C:F6:C0:02:21:00:AC:84:FB:06:76:FF:8A:DA:0B: AE:E7:96:A9:BC:F7:F2:CA:0A:29:CB:31:85:3B:52:43: D5:42:EF:2F:39:7D:71 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Dec 29 08:25:08.186 2025 GMT Extensions: 00:00:05:00:00:DD:90:C1 Signature : ecdsa-with-SHA256 30:46:02:21:00:A3:8C:E8:10:33:DB:E4:AF:AF:95:BA: AE:C8:BD:9C:A0:A1:95:FC:05:6A:02:53:6B:E0:2C:0A: EE:29:88:9B:42:02:21:00:E1:FA:D5:63:D3:22:8E:A0: 46:94:AD:81:F6:3B:BA:DB:F7:4E:33:2E:25:2F:2D:48: 17:AF:44:E7:27:F3:AD:1E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Dec 29 08:25:07.449 2025 GMT Extensions: 00:00:05:00:00:05:15:9E Signature : ecdsa-with-SHA256 30:44:02:20:5C:17:4A:87:DA:DF:4A:A1:FC:F8:E0:9D: 1E:E4:04:EC:FD:6F:A2:3F:11:C3:2F:51:F7:33:50:35: D0:41:B8:50:02:20:59:90:8C:C9:01:7B:4E:88:6B:6D: 2A:EA:91:D2:40:D7:CA:1D:1E:7F:36:E2:4D:C2:45:82: C8:C3:B9:5A:B8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-29T00:03:09+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1554
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →