DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

cleanmx.es · 109.71.47.150:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `cleanmx.es'
The certificate expires within 30 days.

Certificate verification failed

Subject
CN=*.cleanmx.pt
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Valid from
2026-04-13T15:26:54+00:00
Expires
2026-10-29T15:26:54+00:00
Days remaining
17
Serial (hex)
7D4784ECF64AC6A7B321333D
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.cleanmx.pt, DNS:cleanmx.pt

SHA-256 fingerprint

43:0A:59:C1:50:7E:38:C5:11:B1:0B:51:FA:D3:F4:9E:A8:5C:94:C4:BA:7B:90:37:C3:BA:D5:7C:49:41:52:AC
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr6alphasslca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr6alphasslca2025
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr6alphasslca2025.crl
subjectAltName
DNS:*.cleanmx.pt, DNS:cleanmx.pt
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
subjectKeyIdentifier
4A:3E:2E:5D:60:1E:8D:A6:8C:3D:E9:3B:78:92:DD:D5:00:99:2C:1D
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Apr 13 15:26:56.910 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F6:96:3B:82:36:7B:B6:68:84:C2:09: A6:CB:C3:13:C3:70:45:44:33:CB:10:9C:90:4B:0E:BE: 30:5C:9C:44:E9:02:20:40:4F:DC:47:44:ED:48:A1:7B: ED:11:B6:A5:3C:1D:19:F1:7B:C6:F9:DC:26:21:AC:B7: 12:77:E9:2F:8A:99:D9 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Apr 13 15:26:56.910 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CF:34:7D:DC:E3:6A:6E:D5:6F:DB:E6: 44:EC:84:C2:88:1A:A6:35:77:21:3C:26:9E:98:98:9D: 57:71:BA:8B:9A:02:20:74:67:4E:DC:F9:9B:0F:55:D8: 45:5C:46:95:27:F3:13:B5:0A:DC:AE:CC:09:8B:21:E9: 15:A2:E6:35:27:B1:0C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Apr 13 15:26:56.900 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:93:1A:96:D2:20:B9:D3:4D:67:11:B3: 51:5C:07:00:46:29:38:49:5C:86:3D:C3:D8:36:B7:F3: 1D:85:78:85:93:02:20:3B:42:77:68:7A:24:32:D8:9C: 93:23:03:A3:53:2E:14:F0:E9:43:61:00:F6:F3:9D:30: DD:30:40:8F:E5:9E:3A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-12T09:04:49+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2025-05-21T02:36:52+00:00
Expires
2027-05-21T00:00:00+00:00
Days remaining
220
Serial (hex)
837D4EB89E912FE72CAD3BC7692DDC20
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A8:83:55:92:31:F8:38:8D:AF:35:CE:41:C8:10:10:40:AE:8F:D9:B6:56:43:42:47:B9:47:5A:F5:92:CC:08:CA
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr6 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r6.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r6.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2014-12-10T00:00:00+00:00
Expires
2034-12-10T00:00:00+00:00
Days remaining
2980
Serial (hex)
45E6BB038333C3856548E6FF4551
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2C:AB:EA:FE:37:D0:6C:A2:2A:BA:73:91:C0:03:3D:25:98:29:52:C4:53:64:73:49:76:3A:3A:B5:AD:6C:CF:69
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
-----BEGIN CERTIFICATE-----
MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEg
MB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2Jh
bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQx
MjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjET
MBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQssgrRI
xutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1k
ZguSgMpE3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxD
aNc9PIrFsmbVkJq3MQbFvuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJw
LnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqMPKq0pPbzlUoSB239jLKJz9CgYXfIWHSw
1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+azayOeSsJDa38O+2HBNX
k7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05OWgtH8wY2
SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/h
bguyCLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4n
WUx2OVvq+aWh2IMP0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpY
rZxCRXluDocZXFSxZba/jJvcE+kNb7gu3GduyYsRtYQUigAZcIN5kZeR1Bonvzce
MgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTAD
AQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNVHSMEGDAWgBSu
bAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN
nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGt
Ixg93eFyRJa0lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr61
55wsTLxDKZmOMNOsIeDjHfrYBzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLj
vUYAGm0CuiVdjaExUd1URhxN25mW7xocBFymFe944Hn+Xds+qkxV/ZoVqW/hpvvf
cDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr3TsTjxKM4kEaSHpz
oHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB10jZp
nOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfs
pA9MRf/TuTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+v
JJUEeKgDu+6B5dpffItKoZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R
8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+tJDfLRVpOoERIyNiwmcUVhAn21klJwGW4
5hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →