THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

gruporecovery.com · 2.16.6.227:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=Sao Paulo L=Sao Paulo O=Recovery do Brasil Consultoria S.A CN=www.gruporecovery.com
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-10-01T00:00:00+00:00
Expires
2027-04-17T23:59:59+00:00
Days remaining
188
Serial (hex)
0A6313680FFE1D9AD2B8FB74BC5C2993
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:www.gruporecovery.com, DNS:apidynamics-hml.gruporecovery.com, DNS:apidynamics.gruporecovery.com, DNS:bff.gruporecovery.com, DNS:boletoexpress-api.gruporecovery.com, DNS:boletoexpress.gruporecovery.com, DNS:descadastramento.gruporecovery.com, DNS:digital-hml.gruporecovery.com, DNS:digital.gruporecovery.com, DNS:gruporecovery.com, DNS:hml-plat.gruporecovery.com, DNS:hub-hml.gruporecovery.com, DNS:hub.gruporecovery.com, DNS:incentivos-api.gruporecovery.com, DNS:novo.gruporecovery.com, DNS:plataforma-api.gruporecovery.com, DNS:poc-plataformaapi.gruporecovery.com, DNS:portal.gruporecovery.com, DNS:raas-broker-api-hml.gruporecovery.com, DNS:raas-broker.gruporecovery.com, DNS:raas-gateway-az.gruporecovery.com, DNS:raas-gateway-hml.gruporecovery.com, DNS:raas-gateway.gruporecovery.com, DNS:recjud-hml.gruporecovery.com, DNS:recjud.gruporecovery.com, DNS:reconecta.gruporecovery.com, DNS:recovery-landpage-bff-api-hml.gruporecovery.com, DNS:recovery-landpage-bff-api.gruporecovery.com, DNS:recplus.gruporecovery.com, DNS:renegocie-hml.gruporecovery.com, DNS:renegocie.gruporecovery.com, DNS:servicing-service-contratantes-api-hml.gruporecovery.com, DNS:servicing-service-contratantes-api.gruporecovery.com, DNS:servicing-service-contratantes-app-hml.gruporecovery.com, DNS:servicing-service-contratantes-app.gruporecovery.com, DNS:sir.gruporecovery.com, DNS:suporte.gruporecovery.com, DNS:wssir.gruporecovery.com, DNS:www.renegocie.gruporecovery.com

SHA-256 fingerprint

96:40:23:4D:A8:56:EC:4C:85:3F:C8:98:72:2C:7C:87:6F:D1:EA:02:61:13:AB:D2:0F:D5:FE:8A:42:63:01:58
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
EE:0F:92:21:4C:BB:F3:40:D3:6D:D8:9E:C1:84:16:FC:E5:69:4A:DD
subjectAltName
DNS:www.gruporecovery.com, DNS:apidynamics-hml.gruporecovery.com, DNS:apidynamics.gruporecovery.com, DNS:bff.gruporecovery.com, DNS:boletoexpress-api.gruporecovery.com, DNS:boletoexpress.gruporecovery.com, DNS:descadastramento.gruporecovery.com, DNS:digital-hml.gruporecovery.com, DNS:digital.gruporecovery.com, DNS:gruporecovery.com, DNS:hml-plat.gruporecovery.com, DNS:hub-hml.gruporecovery.com, DNS:hub.gruporecovery.com, DNS:incentivos-api.gruporecovery.com, DNS:novo.gruporecovery.com, DNS:plataforma-api.gruporecovery.com, DNS:poc-plataformaapi.gruporecovery.com, DNS:portal.gruporecovery.com, DNS:raas-broker-api-hml.gruporecovery.com, DNS:raas-broker.gruporecovery.com, DNS:raas-gateway-az.gruporecovery.com, DNS:raas-gateway-hml.gruporecovery.com, DNS:raas-gateway.gruporecovery.com, DNS:recjud-hml.gruporecovery.com, DNS:recjud.gruporecovery.com, DNS:reconecta.gruporecovery.com, DNS:recovery-landpage-bff-api-hml.gruporecovery.com, DNS:recovery-landpage-bff-api.gruporecovery.com, DNS:recplus.gruporecovery.com, DNS:renegocie-hml.gruporecovery.com, DNS:renegocie.gruporecovery.com, DNS:servicing-service-contratantes-api-hml.gruporecovery.com, DNS:servicing-service-contratantes-api.gruporecovery.com, DNS:servicing-service-contratantes-app-hml.gruporecovery.com, DNS:servicing-service-contratantes-app.gruporecovery.com, DNS:sir.gruporecovery.com, DNS:suporte.gruporecovery.com, DNS:wssir.gruporecovery.com, DNS:www.renegocie.gruporecovery.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Oct 1 14:19:56.621 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:52:84:18:20:E3:0C:1C:C7:AE:C8:0A:31: 3C:C5:2A:69:BE:B3:7E:F6:EF:22:C5:DE:00:56:E4:5B: 2F:F9:D3:D0:02:20:76:9D:A2:A8:83:FD:73:AD:26:AC: BD:3E:4F:53:25:60:1E:E8:EF:0B:20:DF:E2:07:EA:0D: A2:3D:85:EC:2A:0E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Oct 1 14:19:56.593 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:71:A2:0B:0A:61:BC:A9:2F:8D:FF:89:3E: B0:EF:B8:BD:87:ED:44:7E:7F:34:8F:4B:40:46:0F:16: E2:1B:62:18:02:20:0C:59:B0:CE:96:FF:81:6B:5B:82: 8B:C8:BA:1A:F3:B3:F9:14:60:6B:CC:FF:32:CC:E6:04: 81:8B:93:C5:BD:0A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Oct 1 14:19:56.700 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:08:27:94:7C:6E:E8:0D:24:B8:EA:0A:10: 51:47:95:B3:B7:76:99:AB:FD:75:93:87:84:A4:CC:07: 1D:6E:02:41:02:21:00:8C:F2:4F:43:A0:8C:B9:CE:EA: AE:C0:AE:2A:AA:9E:E1:D2:DA:8F:40:B6:17:29:BB:25: 7B:B9:99:CB:7D:A8:F3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-11T21:56:20+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1645
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →