DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dns2.citrahost.com · 103.123.16.133:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `dns2.citrahost.com'
The certificate expires within 30 days.

Certificate verification failed

Subject
CN=promo.citra.web.id
Issuer
C=US O=cPanel, LLC CN=cPanel ECC Domain Validation Secure Server CA 3
Valid from
2026-08-03T00:00:00+00:00
Expires
2026-11-01T23:59:59+00:00
Days remaining
26
Serial (hex)
A21070C6FAEC2CB59E92EB97FAA19517
Signature
ecdsa-with-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:promo.citra.web.id, DNS:mail.promo.citra.web.id, DNS:www.promo.citra.web.id

SHA-256 fingerprint

FE:72:49:CE:46:24:1E:74:BD:97:81:8D:B3:28:FD:55:36:4C:D8:46:43:22:9C:46:D3:39:80:22:B1:EA:34:96
Certificate extensions & PEM
authorityKeyIdentifier
97:D9:CF:5A:76:A9:D3:36:C2:12:B4:86:02:61:32:8D:16:C0:5A:11
subjectKeyIdentifier
26:AD:44:D1:89:D8:F3:1A:49:6E:2A:42:78:9B:44:2D:3B:70:34:B8
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/cPanelECCDomainValidationSecureServerCA3.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Aug 3 18:27:41.001 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:61:1D:BB:A6:F0:DF:55:47:F5:50:78:83: 04:04:C9:32:79:11:80:3B:B5:4E:AB:73:67:BB:F0:67: BF:8E:C4:5F:02:21:00:A1:30:FE:0E:79:E0:CB:9A:74: 08:DF:9C:04:89:A3:36:01:CD:47:A4:8C:C1:BC:B8:F6: 87:58:F4:0B:D4:54:72 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Aug 3 18:27:40.995 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E1:3D:7F:5D:0C:F8:DE:2F:A9:F0:68: 66:E6:A4:A5:53:72:45:FF:82:ED:52:36:9A:53:21:0A: 72:80:0D:CE:2F:02:20:14:25:C1:32:77:3C:3E:30:C9: 44:C2:04:F9:F0:E5:78:5E:7E:A2:CA:02:9A:6F:D8:D7: 09:9C:9E:BA:08:00:CF
subjectAltName
DNS:promo.citra.web.id, DNS:mail.promo.citra.web.id, DNS:www.promo.citra.web.id
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_CHACHA20_POLY1305_SHA256 · Checked 2026-10-06T02:40:18+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=cPanel, LLC CN=cPanel ECC Domain Validation Secure Server CA 3
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2024-01-31T00:00:00+00:00
Expires
2034-01-30T23:59:59+00:00
Days remaining
2673
Serial (hex)
F39CE83CDB0318FBA5CBD0C2654B7791
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

51:BD:8C:23:F3:12:69:46:38:59:C1:D5:BA:09:9A:26:BA:96:5D:94:A0:F6:AF:57:3F:95:E1:97:6F:1C:67:E0
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
97:D9:CF:5A:76:A9:D3:36:C2:12:B4:86:02:61:32:8D:16:C0:5A:11
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2021-03-22T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
817
Serial (hex)
B99146A719B53D776F152D459B95997C
Signature
RSA-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:02:70:1F:0F:D0:96:0F:F2:B5:1F:39:AA:EB:20:A7:78:D8:32:61:A9:59:AD:0D:7F:F0:BE:54:24:0F:67:3D
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →