DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dnsimple.com · 104.245.210.170:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.dnsimple.com
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV E36
Valid from
2026-07-30T00:00:00+00:00
Expires
2027-02-13T23:59:59+00:00
Days remaining
141
Serial (hex)
4D670064DB6A1A7A89A1C8244089CB57
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.dnsimple.com, DNS:dnsimple.com

SHA-256 fingerprint

29:D9:73:EE:03:ED:1D:EE:5D:4F:FA:96:B6:8A:7F:7D:67:3C:91:17:08:52:B5:46:03:FD:AE:A8:A5:02:3A:78
Certificate extensions & PEM
authorityKeyIdentifier
17:99:A8:04:C1:6F:E4:2D:70:A8:0A:10:3D:03:D3:E9:1A:B8:26:63
subjectKeyIdentifier
CC:73:4C:2A:F0:48:C0:C4:1B:91:52:EF:2B:E0:D8:1C:74:5A:B2:3B
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVE36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.dnsimple.com, DNS:dnsimple.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 30 14:16:40.996 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:F2:30:80:DD:51:40:AE:D9:AB:C2: A0:03:AE:5D:6D:D5:0E:0F:9C:92:07:32:93:81:B4:65: EC:82:60:13:7C:02:21:00:A0:BC:83:36:73:56:23:C7: DC:2D:75:BC:9A:32:DA:49:82:D9:35:25:82:08:71:D1: 8D:8B:BC:EC:49:5D:6C:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jul 30 14:16:41.784 2026 GMT Extensions: 00:00:05:00:07:57:45:37 Signature : ecdsa-with-SHA256 30:46:02:21:00:AA:87:CA:7B:D1:54:AE:7E:57:1A:AF: 09:E1:08:C8:94:FA:47:BC:0F:9E:70:FF:7B:3B:4D:03: 84:83:EE:5E:E4:02:21:00:E8:10:74:AB:DC:63:9B:2D: 9A:04:C5:B9:8B:84:AE:78:B6:8D:F7:85:2E:7B:B8:A5: 3E:06:0D:6C:B1:4F:47:04 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jul 30 14:16:41.045 2026 GMT Extensions: 00:00:05:00:00:56:4B:DA Signature : ecdsa-with-SHA256 30:46:02:21:00:A8:F4:DE:F5:65:6D:12:BA:B6:A6:9F: 92:5B:A8:CE:3E:9C:54:1E:51:3C:3D:E1:C4:16:90:4B: 8F:2E:BF:ED:D8:02:21:00:BC:3E:7A:95:A9:92:FD:2A: 9E:0C:CC:0D:43:E2:B3:83:4A:84:E3:A9:3F:F0:00:FC: A2:5D:67:2B:68:B8:E4:A3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-25T16:42:25+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV E36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3465
Serial (hex)
36E059ED888DD57AEDD570B6727F9BDA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:3F:0B:A8:0E:3A:C2:22:65:6D:FD:04:15:8C:C1:5C:29:27:D4:2D:5D:05:F0:1D:EE:4A:47:EB:43:A9:16:DF
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
17:99:A8:04:C1:6F:E4:2D:70:A8:0A:10:3D:03:D3:E9:1A:B8:26:63
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4133
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →