THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dns2.ch · 85.158.232.30:443

Unverified

Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed

The certificate has expired.

Certificate verification failed

Subject: C=US O=Unspecified CN=CentosStream.localdomain emailAddress=root@CentosStream.localdomain
Issuer: C=US O=Unspecified OU=ca-7928540246226226048 CN=CentosStream.localdomain emailAddress=root@CentosStream.localdomain
Valid from: 2021-05-27T20:47:28+00:00
Expires: 2022-06-01T22:27:28+00:00
Days remaining: -1578
Serial (hex): 1D2C9EF1904847A5
Signature: RSA-SHA256
Public key: RSA 2048

Subject alternative names (SAN)

DNS:CentosStream.localdomain

SHA-256 fingerprint

7B:4F:4D:68:BF:B6:56:7C:79:7E:D9:09:DF:BD:F7:57:DF:D1:CB:76:86:FE:94:8B:F0:BE:22:A6:87:F8:6A:99

Certificate extensions & PEM

keyUsage: Digital Signature, Key Encipherment
extendedKeyUsage: TLS Web Server Authentication
basicConstraints: CA:FALSE
subjectAltName: DNS:CentosStream.localdomain
authorityKeyIdentifier: 2D:11:FB:AB:42:47:C6:2F:1F:E6:A1:AB:C8:7E:44:F7:B5:74:80:F8

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-26T21:40:16+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject: C=US O=Unspecified OU=ca-7928540246226226048 CN=CentosStream.localdomain emailAddress=root@CentosStream.localdomain
Issuer: C=US O=Unspecified OU=ca-7928540246226226048 CN=CentosStream.localdomain emailAddress=root@CentosStream.localdomain
Valid from: 2021-05-27T20:47:27+00:00
Expires: 2022-06-01T22:27:27+00:00
Days remaining: -1578
Serial (hex): 6E07D558C3B3CB80
Signature: RSA-SHA256
Public key: RSA 4096

Subject alternative names (SAN)

DNS:CentosStream.localdomain

SHA-256 fingerprint

EF:D5:76:3E:02:63:2A:52:F9:1E:2A:E8:FE:F9:3D:19:75:DB:69:24:3E:71:EE:35:21:FC:A3:1F:16:8D:F6:58

Certificate extensions & PEM

keyUsage: Digital Signature, Key Encipherment, Certificate Sign
basicConstraints: CA:TRUE
nameConstraints: Permitted: DNS:CentosStream.localdomain
subjectAltName: DNS:CentosStream.localdomain
subjectKeyIdentifier: 2D:11:FB:AB:42:47:C6:2F:1F:E6:A1:AB:C8:7E:44:F7:B5:74:80:F8

-----BEGIN CERTIFICATE-----
MIIGPTCCBCWgAwIBAgIIbgfVWMOzy4AwDQYJKoZIhvcNAQELBQAwgZUxCzAJBgNV
BAYTAlVTMRQwEgYDVQQKDAtVbnNwZWNpZmllZDEfMB0GA1UECwwWY2EtNzkyODU0
MDI0NjIyNjIyNjA0ODEhMB8GA1UEAwwYQ2VudG9zU3RyZWFtLmxvY2FsZG9tYWlu
MSwwKgYJKoZIhvcNAQkBFh1yb290QENlbnRvc1N0cmVhbS5sb2NhbGRvbWFpbjAe
Fw0yMTA1MjcyMDQ3MjdaFw0yMjA2MDEyMjI3MjdaMIGVMQswCQYDVQQGEwJVUzEU
MBIGA1UECgwLVW5zcGVjaWZpZWQxHzAdBgNVBAsMFmNhLTc5Mjg1NDAyNDYyMjYy
MjYwNDgxITAfBgNVBAMMGENlbnRvc1N0cmVhbS5sb2NhbGRvbWFpbjEsMCoGCSqG
SIb3DQEJARYdcm9vdEBDZW50b3NTdHJlYW0ubG9jYWxkb21haW4wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDTpAS9hm+7aTjy+1peOD56S4f9JJbwa4zB
cvTb0WQdAOYcsy4yTkLP5vgf0tX4QsVp48CKk0PNEQSv5HIjvjk4eeXCIpeZHUL4
A6OHsh5YEWsnatHNLsGGjkDbm3taq3JKxwFLIRfg1UQPsHAVF+z8nNboaqY44NCx
9znYcgCdWQgiNKcoZ2NHdC/NJLdr1Pr1DRGP3At4h5NkTT8kW5Gt7YvQ/kNjpIcW
ZZqwgkIYU/gZ6Z4gkT7WhvPIf2Pe9pQEVnZaN1H9K8Z3kQJfe1MsIdTaqKTB1vid
5vC03Rl5reAYL1tN6IX6iQWSbILhYwmAK7uoZxO4lV93ha2ysGNmgZBs1iOKdXel
djLo17Cg6N6JHOoCMcl+eie9fZZDIw1ck0SvN31F9pmttv8U3WBv34stwqhHICDe
332fMX1ohddxMNEl7Bex2+RheN3enZkaKoHBsfDdlv+dxVA6Wf5tQhlqhRTH0AL8
vae8gL5JQULuxiDScegsYDbCb5cJY76sdzBTN9nBQsAeTBLAPgGi2Pza1j4qWokY
yghmN7zMqUjeYnNihqrVjCgAVeQYDuCwCN4PKkr5hkGJNoWqrvwnd2mtMS2i3b5q
sSYQSJQV90B7X9cl6fF3vmd1VW6oUouiUVDFHGNpSeGaaqzQtHcYYkr+j+JVtuk0
aa+5PrYNOQIDAQABo4GOMIGLMA4GA1UdDwEB/wQEAwICpDAMBgNVHRMEBTADAQH/
MCcGA1UdHgQgMB6gHDAaghhDZW50b3NTdHJlYW0ubG9jYWxkb21haW4wIwYDVR0R
BBwwGoIYQ2VudG9zU3RyZWFtLmxvY2FsZG9tYWluMB0GA1UdDgQWBBQtEfurQkfG
Lx/moavIfkT3tXSA+DANBgkqhkiG9w0BAQsFAAOCAgEAyLKPM4mVh04LxYbWmAoQ
OzbOQq3X5y+mqf0zavWM2cylEiQ/S7gtQzuPh7BVFVzz+UokEDbP3B3Qs3B8xhEQ
ZM6hqtLj4CoBHOFBNMGPknfBjtSIoPP5g1nf+dujMO+CD3B/ZoGX7FDX8ZAFUnL1
MGd+TXDVhF6I10Yfgc2ETkU2aELn4KeQbGFuZE0U6z3BdPPrtsODVGBW1rcgvdOX
7l+HF0Ap7V9Wp2Cs4EYQyIVL9OFsjy4HlIw87EGTtu19LJ1k49tveCk4Eu86PZRn
4WQYHYr5g5rudjDfqJLzhXfWyln6mhoxLp3XtL3vdL7P+JuL9DQOuCScI1RFKRCb
Fo/7vYdKTjIYixBgY4M8Skoc41oryybOupk4VTGbFXvhFXJusXnTsqTJtbhucD5z
yC5KaxNJimYi8FG7kYiRmHQqUwv4iOn6tGsNDFocPjgOp1cJiANys3R1jYPPpZBk
+xPZ4bHc5dZmJk8AUMF+gYNPRblaWulFADViLaE+UJfm177IwEADGLrITwuWWkea
Tp1cvzahpEoR/99GhazqECZ84c/oXvAAhMDRptHqb3cV1DrQAmnHoHRxfJjs2G9z
6AjMJwwcnEcVhcHiqJ5yVLvvMQaJoWH+jhRRdN3DLl7XEwXlETtj3qqTDsUTHy29
JZDlPLye92hdgOo7WPXGVFY=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →