DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

hkirc.hk · 203.119.2.66:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed

Certificate verification failed

Subject
CN=*.hkirc.hk
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS RSA CA G1
Valid from
2026-01-22T00:00:00+00:00
Expires
2027-01-21T23:59:59+00:00
Days remaining
119
Serial (hex)
0D0CAA3A3E05CF897D6883494C84F40C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.hkirc.hk, DNS:hkirc.hk

SHA-256 fingerprint

62:88:89:45:AB:3E:AF:B7:47:D1:8E:64:9B:AA:C6:A7:7B:88:4D:A1:0B:1E:25:D6:28:E9:68:5A:14:09:5E:BB
Certificate extensions & PEM
authorityKeyIdentifier
0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
subjectKeyIdentifier
BC:80:42:15:39:1E:C7:21:01:B7:12:E9:C7:E7:8A:2F:C6:3A:F3:E2
subjectAltName
DNS:*.hkirc.hk, DNS:hkirc.hk
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.rapidssl.com CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 22 02:14:42.206 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C7:1D:CB:26:C5:05:8E:80:1B:86:14: DD:BA:BD:02:3D:53:6B:90:BE:F3:8B:87:51:44:1C:5C: 7F:ED:D5:68:F9:02:20:5C:84:8D:21:F4:B0:AE:70:68: F0:C1:70:73:23:32:4A:BE:9B:95:A0:F5:DD:C6:ED:84: 8E:4F:02:0B:18:62:22 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 22 02:14:42.200 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:16:57:C7:1C:2E:8D:C7:42:2D:3F:26:61: F9:D0:3A:C7:1A:3B:E8:81:84:6F:7E:89:06:91:54:E9: EC:A2:35:EE:02:20:2C:C7:B9:F6:5B:0D:05:2A:D3:FF: 7F:11:C6:5B:19:6C:75:D8:74:D2:03:7C:B7:47:8F:30: 1D:69:72:BD:2F:B7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 22 02:14:42.430 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2A:79:49:0A:4F:45:B0:0A:49:DA:3D:9F: 0E:B5:BE:C5:DB:4F:3B:D4:1D:AF:CC:6D:16:59:DF:71: BB:F9:D5:36:02:20:36:D0:7A:26:DD:58:1B:A8:11:E8: E2:68:77:56:C1:E9:AB:39:C2:6B:AC:CB:FA:6F:BA:26: 3E:20:B8:CF:46:0C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-24T22:22:33+00:00

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →