DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

concepts.co.nz · 146.171.248.181:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
C=NZ L=Auckland O=SPARK NEW ZEALAND LIMITED CN=concepts.co.nz
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2025-09-02T00:00:00+00:00
Expires
2026-09-01T23:59:59+00:00
Days remaining
-64
Serial (hex)
08DF6EAD0C7A3D65722BEE8F8DB8C1B4
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:concepts.co.nz, DNS:www.concepts.co.nz

SHA-256 fingerprint

B1:F9:4C:B9:96:68:1E:D0:79:0F:F1:25:1E:6B:49:EB:3A:05:7B:5C:43:45:59:D1:1F:59:F8:76:01:C7:44:1D
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
58:4E:1D:DF:6A:7D:7A:66:22:CE:A1:CE:F6:77:34:D5:44:95:1D:EA
subjectAltName
DNS:concepts.co.nz, DNS:www.concepts.co.nz
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Sep 2 02:52:27.230 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:65:84:CC:FA:FB:72:88:E4:84:55: C7:69:A0:41:D9:95:95:B1:BD:1A:B4:4C:99:34:08:21: AE:A6:1A:F3:A8:02:21:00:EC:DF:5A:7B:03:68:CF:88: 71:03:9A:A9:92:10:A0:10:2B:C9:1C:87:DA:5E:5C:38: 1A:A3:35:97:69:3B:06:71 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Sep 2 02:52:27.230 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:00:8C:A4:E7:D0:FD:58:22:B0:0F:21:96: 56:E8:EF:57:EC:18:57:B8:02:7D:E4:79:14:4B:B6:A7: FE:86:39:A3:02:20:0D:73:B4:67:AD:5E:DC:E8:57:CE: B9:76:1E:F4:A5:2B:27:6E:19:CA:D7:78:97:9E:87:C9: 3F:B2:98:55:35:11 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 2 02:52:27.253 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:01:E3:A6:03:3A:A1:D1:6A:F7:75:53:EE: 2B:A4:7B:42:F3:96:18:BD:C9:67:7C:B4:7A:45:86:69: AA:28:48:F8:02:21:00:E9:88:56:91:65:5A:93:9F:44: 75:92:C4:7B:E7:C9:16:12:FC:37:8B:AA:68:DB:15:BA: 87:0F:68:84:CD:2B:C4
-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgIQCN9urQx6PWVyK+6PjbjBtDANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjUw
OTAyMDAwMDAwWhcNMjYwOTAxMjM1OTU5WjBdMQswCQYDVQQGEwJOWjERMA8GA1UE
BxMIQXVja2xhbmQxIjAgBgNVBAoTGVNQQVJLIE5FVyBaRUFMQU5EIExJTUlURUQx
FzAVBgNVBAMTDmNvbmNlcHRzLmNvLm56MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2A0OL5mQ1j+4sLc7ofOqzEIAv7jZkbM7sv7rb7Ci5BZCv2CLn9tZ
J6IGBIyPtGFFDnpT5sX4+TVhw+9zOuqjn0IFI9QzNcLDavrZ5Z3sfAPuJQRgtAq7
w5IUAxvE+tOJWfr7JdGY7KeBME1zJkculjESCmT2cIp0+0ZNv5frY3BWBgMdg13r
OGVUu7iDDf/VfvyrEWIa63VmxalhVAyI4v2hbQ3KLd6t31n1G6hixgB7DXW282hU
bRsF1yzDhL9aJifY4uxmMd3lMXdA545m6MvTsgRBX9euKiQFg5J/h3RHUVLoPRtV
0FLfPldkEKr/MQqbdkVSFfEnoDq2J2xfCQIDAQABo4IDnjCCA5owHwYDVR0jBBgw
FoAUdIWAwGbH3zfez70pN6oDHb7tzRcwHQYDVR0OBBYEFFhOHd9qfXpmIs6hzvZ3
NNVElR3qMC0GA1UdEQQmMCSCDmNvbmNlcHRzLmNvLm56ghJ3d3cuY29uY2VwdHMu
Y28ubnowPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYy
MDIwQ0ExLTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGln
aUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwgYcGCCsGAQUF
BwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEG
CCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRH
bG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCC
AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcA2AlVO5RPev/IFhlvlE+Fq7D4/F6H
VSYPFdEucrtFSxQAAAGZCFcO3gAABAMASDBGAiEArWWEzPr7cojkhFXHaaBB2ZWV
sb0atEyZNAghrqYa86gCIQDs31p7A2jPiHEDmqmSEKAQK8kch9peXDgaozWXaTsG
cQB1AMIxfldFGaNF7n843rKQQevHwiFaIr9/1bWtdprZDlLNAAABmQhXDt4AAAQD
AEYwRAIgAIyk59D9WCKwDyGWVujvV+wYV7gCfeR5FEu2p/6GOaMCIA1ztGetXtzo
V865dh70pSsnbhnK13iXnofJP7KYVTURAHYAlE5Dh/rswe+B8xkkJqgYZQHH0184
AgE/cmd9VTcuGdgAAAGZCFcO9QAABAMARzBFAiAB46YDOqHRavd1U+4rpHtC85YY
vclnfLR6RYZpqihI+AIhAOmIVpFlWpOfRHWSxHvnyRYS/DeLqmjbFbqHD2iEzSvE
MA0GCSqGSIb3DQEBCwUAA4IBAQBNC4GjoFlLk1k+EeJVofUWrMvWWMBfRhNhfBBQ
Dvd/cqBCk7fMJTLZmPCp25XjfL3JfCE0lzfrjzuIV2BiKvAGexwxdGMbl6w5k4JC
n25N3nSm29wtBlDEXL3GJ7YdFmw/62jfjFLLBfyjKdNcu2Q3R9uj8HZAnAI/oHh7
/q3wp8y0Gxqj1WQ1Ao/pgyz5cBWI/TCxJUFPd1Ms9SKdZTU011OUpx4WkG6rqpxa
P/MchgnKzGql19i7Q0D+9yycXaCheZa78Qb2xo/yJHDd61nRJf9Kqu2utCMnQlbG
XbjgiVQmuQxcXh0854e18+54OdDt+kcdUPR4ArYduCY4yTfT
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-11-04T03:09:43+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2021-03-30T00:00:00+00:00
Expires
2031-03-29T23:59:59+00:00
Days remaining
1606
Serial (hex)
0CF5BD062B5602F47AB8502C23CCF066
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →