DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ekhost.com · 45.119.4.39:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=www.ekhost.com
Issuer
C=US O=Let's Encrypt CN=E7
Valid from
2025-11-19T21:10:00+00:00
Expires
2026-02-17T21:09:59+00:00
Days remaining
-246
Serial (hex)
055E154AD5BD6AEEE3F06D1D4D1016E4BAD2
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:www.ekhost.com

SHA-256 fingerprint

8F:BF:D9:60:91:25:C2:A8:6B:62:F9:C1:5E:72:12:C0:13:A4:BF:B9:21:B3:30:A6:16:89:C0:66:1C:8C:BC:C5
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
50:C0:C9:15:1E:18:D6:41:BE:CD:3F:E7:0B:C8:CB:B0:EE:FA:6E:0F
authorityKeyIdentifier
AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80
authorityInfoAccess
CA Issuers - URI:http://e7.i.lencr.org/
subjectAltName
DNS:www.ekhost.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://e7.c.lencr.org/83.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Nov 19 22:08:30.640 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:65:86:81:C0:3F:F3:5C:DA:24:B5:9B:B2: FC:C2:32:C0:9F:24:D4:00:B2:AF:B9:E4:2D:55:DA:F0: 8A:F3:02:D0:02:20:5F:2F:1E:51:0A:E9:3B:64:26:63: 08:83:2B:4F:74:2E:05:ED:83:C0:60:54:CC:4A:88:11: 77:6B:A2:21:3A:F7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : Nov 19 22:08:30.707 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:52:40:3C:C8:DF:44:63:63:F3:CB:C4:7C: D4:AD:5D:EF:93:91:05:9A:7B:47:0F:FE:60:87:3E:4A: 70:32:84:81:02:20:23:CD:FB:93:00:B8:0D:D8:BF:21: 7F:7A:4E:F0:8D:AF:5A:73:87:F3:EF:C9:BE:75:CE:94: 66:13:FE:B6:F2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-21T05:52:56+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=E7
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
142
Serial (hex)
AA75F1E62B8F0A220966D38BBFD4BAA1
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

AE:B1:FD:74:10:E8:3B:C9:6F:5D:A3:C6:A7:C2:C1:BB:83:6D:1F:A5:CB:86:E7:08:51:58:90:E4:28:A8:77:0B
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →