DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

hit.com.hk · 20.239.6.118:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=HK ST=Hong Kong O=Hongkong International Terminals Limited CN=www.hit.com.hk
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2026-05-07T00:00:00+00:00
Expires
2026-11-21T23:59:59+00:00
Days remaining
52
Serial (hex)
12E927283D59EF2A989984FB3FF860D9
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.hit.com.hk, DNS:hit.com.hk

SHA-256 fingerprint

9B:97:1C:98:87:5C:12:E1:F1:9F:FA:02:F3:23:B2:55:93:3A:F7:35:18:34:94:05:42:02:54:2E:8A:D7:65:10
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
F1:FC:87:F7:D2:C3:EE:6D:D2:A6:E5:C9:9D:6C:42:A3:6A:DF:DE:1D
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:www.hit.com.hk, DNS:hit.com.hk
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : May 7 00:44:20.183 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8A:53:B1:C8:0E:D4:58:A8:7A:A4:41: 07:E1:E4:4E:2E:72:DF:AB:CA:6E:4B:1C:63:3B:0F:7C: 98:85:26:FB:2B:02:21:00:CB:DE:85:4B:E7:9C:FB:DB: FB:C9:47:63:7F:5E:59:1C:75:3A:FF:92:68:05:F3:1E: 0D:5B:B1:DD:1D:BC:53:0F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : May 7 00:44:20.255 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CD:AF:56:9B:56:DB:39:23:7F:45:F0: 66:62:81:B2:70:53:EF:8F:01:E3:16:84:F7:CE:1D:03: E1:B4:E3:EC:97:02:20:1C:E4:FC:2C:13:80:83:F7:79: 3B:A0:43:A5:39:26:FA:BF:4E:DA:BC:29:94:53:50:4D: E8:AC:B7:CF:88:AD:5B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : May 7 00:44:21.151 2026 GMT Extensions: 00:00:05:00:0A:55:EF:11 Signature : ecdsa-with-SHA256 30:46:02:21:00:98:A0:DA:C9:F5:2E:FC:35:EC:65:85: E4:9A:70:02:01:37:39:AF:F7:FD:28:92:C8:A4:BC:ED: 63:90:9C:2E:09:02:21:00:C8:F6:8F:D7:64:0D:CD:AE: 0D:4A:13:3F:6A:BC:69:65:6B:61:C7:CF:72:11:09:C2: 48:C1:B6:D0:4C:00:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-30T02:47:58+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3460
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----
MIIGTDCCBDSgAwIBAgIQLBo8dulD3d3/GRsxiQrtcTANBgkqhkiG9w0BAQwFADBf
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD
Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw
HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY
MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp
YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgT1YgUjM2MIIBojANBgkqhkiG9w0B
AQEFAAOCAY8AMIIBigKCAYEApkMtJ3R06jo0fceI0M52B7K+TyMeGcv2BQ5AVc3j
lYt76TvHIu/nNe22W/RJXX9rWUD/2GE6GF5x0V4bsY7K3IeJ8E7+KzG/TGboySfD
u+F52jqQBbY62ofhYjMeiAbLI02+FqwHeM8uIrUtcX8b2RCxF358TB0NHVccAXZc
FYgZndZCeXxjuca7pJJ20LLUnXtgXcjAE1vY4WvbReW0W6mkeZyNGdmpTcFs5Y+s
yy6LtE5Zocji9J9NlNnReox2RWVyEXpA1ChZ4gqN+ZpVSIQ0HBorVFbBKyhdZyEX
gZgNSNtBRwxqwIzJePJhYd4ZUhO1vk+/uP3nwDk0p95q/j7naXNCSvESnrHPypaB
WRK066nKfPRPi9m9kIOhMdYfS8giFRTcdgL24Ycilj7ecAK9Trh0VbjwouJ4WH+x
bt47u68ZFCD/ac55I0DNHkCpaPruj6e9Rmr7K46wZDAYXuEAqB7tGG/jd6JAA+H2
O44CV98NRsU213f1kScIZntNAgMBAAGjggGBMIIBfTAfBgNVHSMEGDAWgBRWc1hk
lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQU42Z0u3BojSxdTg6mSo+bNyKcgpIw
DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgIw
VAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdv
UHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290UjQ2LmNybDCBhAYIKwYBBQUH
AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp
Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYucDdjMCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA
BZXWDHWC3cubb/e1I1kzi8lPFiK/ZUoH09ufmVOrc5ObYH/XKkWUexSPqRkwKFKr
7r8OuG+p7VNB8rifX6uopqKAgsvZtZsq7iAFw04To6vNcxeBt1Eush3cQ4b8nbQR
MQLChgEAqwhuXp9P48T4QEBSksYav7+aFjNySsLYlPzNqVM3RNwvBdvp6vgDtGwc
xlKQZVuuNVIaoYyls8swhxDeSHKpRdxRauTLZ+pl+wGvy0pnrLEJGSz9mOEmfbod
e/XopR2NGqaHJ6bIjyxPu6UtyQGI26En7UAEozACrHz06Nx2jTAY9E6NeB6XuobE
wLK025ZRmvglcURG1BrV24tGHHTgxCe8M3oGlpUSMTKQ2dkgljZVYt+gKdFtWELZ
MuRdi+X3XsrR8LFz+aLUiDRfQqhmw3RxjIyVKvvu9UPYY1nsvxYmFnUSeM+2q1z/
iPUry+xDY9MC6+IhleKT094VKdFVp7LXH42+wvU+17lRolQ2mK2N/nBLVBwaIhib
QXw4VYKwB86Bc6eS6iqsc94KEgD/U4VsjmgfhK+Xp4NM+VYzTTa3QeV3p8xOM0cw
q1p8oZFA+OBcz3FYWpDIe5j0NWKlw9hXsTyPY/HeZUV59akskSOSRSmDfe8wJDPX
58uB9/7lud0G3x0pxQAcffP0ayKavNwDTw4UfJ34cEw=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2046-03-21T23:59:59+00:00
Days remaining
7112
Serial (hex)
758DFD8BAE7C0700FAA925A7E1C7AD14
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7B:B6:47:A6:2A:EE:AC:88:BF:25:7A:A5:22:D0:1F:FE:A3:95:E0:AB:45:C7:3F:93:F6:56:54:EC:38:F2:5A:06
Certificate extensions & PEM
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →