DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

csub.edu · 104.40.0.56:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=California O=California State University, Bakersfield CN=*.csub.edu
Issuer
C=US O=Internet2 CN=InCommon ECC Server CA 2
Valid from
2026-01-20T00:00:00+00:00
Expires
2027-01-20T23:59:59+00:00
Days remaining
105
Serial (hex)
F2963D87867AADDC0D25F67330D76431
Signature
ecdsa-with-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:*.csub.edu, DNS:*.cms.csub.edu, DNS:csub.edu

SHA-256 fingerprint

9D:FC:85:5B:67:F9:DE:72:38:58:AD:33:36:D9:5A:91:08:80:B3:C9:24:E7:A1:FA:78:4F:31:D0:59:56:3D:7C
Certificate extensions & PEM
authorityKeyIdentifier
32:5F:0A:D9:18:59:ED:41:71:21:D5:EE:09:E2:D9:AF:B2:D7:0F:B1
subjectKeyIdentifier
B4:71:72:91:A5:B8:90:3A:88:B3:34:A8:F1:5D:4E:70:86:09:B6:68
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonECCServerCA2.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonECCServerCA2.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 20 16:54:35.435 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:87:77:75:47:7A:E2:AF:87:DA:0E:12: 67:96:25:07:D3:DC:8C:0B:B1:00:51:14:23:A2:85:AD: A9:38:A3:C1:AB:02:20:10:14:9E:CF:66:0F:51:32:AA: C9:EF:96:74:69:A3:1B:A8:6A:96:31:40:87:6B:1D:51: 70:7F:45:FE:8B:11:BB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jan 20 16:54:36.186 2026 GMT Extensions: 00:00:05:00:01:A4:DD:3B Signature : ecdsa-with-SHA256 30:46:02:21:00:F9:E8:2D:64:07:B2:F8:74:05:76:48: A0:50:F1:1D:EE:24:68:2A:29:EF:18:97:AA:54:A8:7C: 90:4B:BA:18:22:02:21:00:AD:49:CF:A8:0F:46:0D:89: 79:5C:59:94:9E:AF:6A:93:65:A8:AA:AF:D9:55:04:E0: CC:EC:68:36:62:C2:AA:B3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jan 20 16:54:35.633 2026 GMT Extensions: 00:00:05:00:00:12:0A:E3 Signature : ecdsa-with-SHA256 30:46:02:21:00:9C:95:FD:B9:25:30:9E:26:15:6A:C3: 23:2E:36:29:23:12:B7:17:17:03:B2:95:2D:3C:1D:30: E5:CE:D6:5B:C4:02:21:00:E8:B5:89:E3:57:E1:79:62: 15:33:1F:87:06:A0:02:9C:FD:C1:14:F6:BC:63:EB:A6: 72:F3:28:E5:39:18:5B:62
subjectAltName
DNS:*.csub.edu, DNS:*.cms.csub.edu, DNS:csub.edu
-----BEGIN CERTIFICATE-----
MIIFETCCBLegAwIBAgIRAPKWPYeGeq3cDSX2czDXZDEwCgYIKoZIzj0EAwIwRDEL
MAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5Db21t
b24gRUNDIFNlcnZlciBDQSAyMB4XDTI2MDEyMDAwMDAwMFoXDTI3MDEyMDIzNTk1
OVowajELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExMTAvBgNVBAoT
KENhbGlmb3JuaWEgU3RhdGUgVW5pdmVyc2l0eSwgQmFrZXJzZmllbGQxEzARBgNV
BAMMCiouY3N1Yi5lZHUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATfTZ/4LGz8BmT+
hd7eOcbD1batq+34VXE3cHmePbybBkoxgwhgNnr4rqraYwBum92V9ap543ZVaoFp
i42WCf/o69LISLxcvWwS13FbbB7n38MobQYhebjSzCyMk6p+rOKjggNFMIIDQTAf
BgNVHSMEGDAWgBQyXwrZGFntQXEh1e4J4tmvstcPsTAdBgNVHQ4EFgQUtHFykaW4
kDqIszSo8V1OcIYJtmgwDgYDVR0PAQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGy
MQECAmcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYG
Z4EMAQICMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9jcmwuc2VjdGlnby5jb20v
SW5Db21tb25FQ0NTZXJ2ZXJDQTIuY3JsMHAGCCsGAQUFBwEBBGQwYjA7BggrBgEF
BQcwAoYvaHR0cDovL2NydC5zZWN0aWdvLmNvbS9JbkNvbW1vbkVDQ1NlcnZlckNB
Mi5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBkAYK
KwYBBAHWeQIEAgSCAYAEggF8AXoAdgAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLj
glJKxM9ZnwAAAZvcVF6rAAAEAwBHMEUCIQCHd3VHeuKvh9oOEmeWJQfT3IwLsQBR
FCOiha2pOKPBqwIgEBSez2YPUTKqye+WdGmjG6hqljFAh2sdUXB/Rf6LEbsAfwCO
ykcLrN5q86IGsKR6hLdG/h/Gv5U+JeabTuQCSPPG6AAAAZvcVGGaAAgAAAUAAaTd
OwQDAEgwRgIhAPnoLWQHsvh0BXZIoFDxHe4kaCop7xiXqlSofJBLuhgiAiEArUnP
qA9GDYl5XFmUnq9qk2Woqq/ZVQTgzOxoNmLCqrMAfwBZbmwzhpSyWXKiVsig6N2Q
SnboCD3ahzsBCDgoFDzuWQAAAZvcVF9xAAgAAAUAABIK4wQDAEgwRgIhAJyV/bkl
MJ4mFWrDIy42KSMStxcXA7KVLTwdMOXO1lvEAiEA6LWJ41fheWIVMx+HBqACnP3B
FPa8Y+umcvMo5TkYW2IwLwYDVR0RBCgwJoIKKi5jc3ViLmVkdYIOKi5jbXMuY3N1
Yi5lZHWCCGNzdWIuZWR1MAoGCCqGSM49BAMCA0gAMEUCIGROO6bQh09BbVEjsgl3
rnnL1rHsO27BGOFjLhDoVA9cAiEA9au3Twuau42pEOpYV1cCOWeUV3H/2VSCWGbS
FZtyMn4=
-----END CERTIFICATE-----

Cipher: ECDHE-ECDSA-AES256-GCM-SHA384 · Checked 2026-10-07T02:46:17+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=US O=Internet2 CN=InCommon ECC Server CA 2
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2022-11-16T00:00:00+00:00
Expires
2032-11-15T23:59:59+00:00
Days remaining
2231
Serial (hex)
A8E0D7AFC1D4CBA52CBC8605C7FD1663
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B7:8D:8E:B3:47:F8:A6:77:7E:BF:9F:D2:3B:83:80:0A:BC:88:CD:B3:CF:1B:40:70:6B:11:B0:5F:1F:A0:6F:BC
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
32:5F:0A:D9:18:59:ED:41:71:21:D5:EE:09:E2:D9:AF:B2:D7:0F:B1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustECCAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
816
Serial (hex)
56671D04EA4F994C6F10814759D27594
Signature
RSA-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A6:CF:64:DB:B4:C8:D5:FD:19:CE:48:89:60:68:DB:03:B5:33:A8:D1:33:6C:62:56:A8:7D:00:CB:B3:DE:F3:EA
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----
MIID0zCCArugAwIBAgIQVmcdBOpPmUxvEIFHWdJ1lDANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgRUNDIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEGqxUWqn5aCPnetUkb1PGWthL
q8bVttHmc3Gu3ZzWDGH926CJA7gFFOxXzu5dP+Ihs8731Ip54KODfi2X0GHE8Znc
JZFjq38wo7Rw4sehM5zzvy5cU7Ffs30yf4o043l5o4HyMIHvMB8GA1UdIwQYMBaA
FKARCiM+lvEH7OKvKe+CpX/QMKS0MB0GA1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1
xmNjmjAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zARBgNVHSAECjAI
MAYGBFUdIAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5j
b20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNAYIKwYBBQUHAQEEKDAmMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEM
BQADggEBABns652JLCALBIAdGN5CmXKZFjK9Dpx1WywV4ilAbe7/ctvbq5AfjJXy
ij0IckKJUAfiORVsAYfZFhr1wHUrxeZWEQff2Ji8fJ8ZOd+LygBkc7xGEJuTI42+
FsMuCIKchjN0djsoTI0DQoWz4rIjQtUfenVqGtF8qmchxDM6OW1TyaLtYiKou+JV
bJlsQ2uRl9EMC5MCHdK8aXdJ5htN978UeAOwproLtOGFfy/cQjutdAFI3tZs4RmY
CV4Ks2dH/hzg1cEo70qLRDEmBDeNiXQ2Lu+lIg+DdEmSx/cQwgwp+7e9un/jX9Wf
8qn0dNW44bOwgeThpWOjzOoEeJBuv/c=
-----END CERTIFICATE-----

Chain certificate 3

Subject
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2004-01-01T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
816
Serial (hex)
01
Signature
RSA-SHA1
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

D7:A7:A0:FB:5D:7E:27:31:D7:71:E9:48:4E:BC:DE:F7:1D:5F:0C:3E:0A:29:48:78:2B:C8:3E:E0:EA:69:9E:F4
Certificate extensions & PEM
subjectKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl Full Name: URI:http://crl.comodo.net/AAACertificateServices.crl 
-----BEGIN CERTIFICATE-----
MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEb
MBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRow
GAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmlj
YXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAwMFoXDTI4MTIzMTIzNTk1OVowezEL
MAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE
BwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNVBAMM
GEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQua
BtDFcCLNSS1UY8y2bmhGC1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe
3M/vg4aijJRPn2jymJBGhCfHdr/jzDUsi14HZGWCwEiwqJH5YZ92IFCokcdmtet4
YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszWY19zjNoFmag4qMsXeDZR
rOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjHYpy+g8cm
ez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQU
oBEKIz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF
MAMBAf8wewYDVR0fBHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20v
QUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29t
b2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2VzLmNybDANBgkqhkiG9w0BAQUF
AAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm7l3sAg9g1o1Q
GE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz
Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2
G9w84FoVxp7Z8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsi
l2D4kF501KKaU73yqWjgom7C12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3
smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →