DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

es.net · 198.128.136.135:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=California O=Energy Sciences Network CN=es.net
Issuer
C=US O=Internet2 CN=InCommon RSA Server CA 2
Valid from
2026-01-02T00:00:00+00:00
Expires
2027-01-02T23:59:59+00:00
Days remaining
102
Serial (hex)
05F44503A3004FA342132689B5116061
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:es.net

SHA-256 fingerprint

58:28:FF:92:06:A5:7B:94:D8:2A:6A:56:04:03:8B:2F:D7:93:0A:C8:4C:DF:51:88:DF:44:E5:6D:C3:25:F8:55
Certificate extensions & PEM
authorityKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
subjectKeyIdentifier
CC:DD:FF:DA:0A:2F:68:21:6B:9A:36:4C:95:FE:F3:84:09:8F:5F:9C
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonRSAServerCA2.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonRSAServerCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:es.net
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 2 09:18:43.620 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D5:24:17:D2:03:51:D4:6E:56:D4:DC: DC:04:CC:8A:26:7C:74:5D:B9:AF:8E:B1:1C:A5:2A:0B: 8C:43:81:C2:8F:02:20:32:DF:7F:12:08:2C:3A:6F:F5: DB:24:0C:34:A9:15:01:12:E2:A1:6B:89:00:AE:07:7A: 62:C6:B2:D7:3E:D3:17 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jan 2 09:18:44.186 2026 GMT Extensions: 00:00:05:00:00:FB:F5:53 Signature : ecdsa-with-SHA256 30:46:02:21:00:EC:94:5E:D0:F1:6A:A8:00:60:81:86: A7:CC:5C:06:26:7D:7D:C8:39:51:7A:3B:6B:8E:F5:83: E4:93:0C:0B:0C:02:21:00:EB:0B:1D:5B:F7:02:8E:6F: 62:41:CC:89:3B:D9:12:12:CD:E8:0A:72:0F:0F:EE:F2: 77:5F:B5:90:8C:87:A6:14 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jan 2 09:18:43.450 2026 GMT Extensions: 00:00:05:00:00:06:87:89 Signature : ecdsa-with-SHA256 30:46:02:21:00:98:95:46:B2:6C:16:B4:19:70:E0:96: 81:44:C0:15:B7:54:A4:54:FB:28:1E:EF:2E:6A:C4:B3: 59:29:E4:5E:EB:02:21:00:DD:BC:DB:A6:7A:20:AC:3A: EF:E0:7D:C4:D4:61:4D:DF:37:C3:A9:FD:56:91:AE:87: 0A:E0:07:2D:90:2F:75:7A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T16:05:01+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Internet2 CN=InCommon RSA Server CA 2
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2022-11-16T00:00:00+00:00
Expires
2032-11-15T23:59:59+00:00
Days remaining
2246
Serial (hex)
835B7615206D2D6E097E0B6E409FEFC0
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:E0:1C:C4:DD:0C:9D:92:A3:DB:D4:90:92:FF:13:F9:CD:38:74:45:CD:C5:7E:5B:98:4E:1B:77:21:B5:B0:29
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
831
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →