THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

horizonconnects.com · 35.209.229.3:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=horizonconnects.com
Issuer
C=US O=Let's Encrypt CN=R11
Valid from
2025-07-09T20:30:27+00:00
Expires
2025-10-07T20:30:26+00:00
Days remaining
-372
Serial (hex)
0646D5616098CE06D0EFB5FDA26F1319F00F
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:horizonconnects.com, DNS:www.horizonconnects.com

SHA-256 fingerprint

B5:11:4D:DC:6A:84:20:54:CE:04:53:4A:96:83:B8:38:9A:0E:61:FA:B0:FA:76:96:E7:2E:21:3E:01:57:5F:4E
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
7B:1D:3D:89:1C:28:95:45:2B:F8:F4:C0:3E:1E:7C:69:34:18:C9:06
authorityKeyIdentifier
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
CA Issuers - URI:http://r11.i.lencr.org/
subjectAltName
DNS:horizonconnects.com, DNS:www.horizonconnects.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r11.c.lencr.org/16.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Jul 9 21:28:57.973 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:99:48:0F:E9:AE:E7:6F:79:3B:CE:44: BC:6D:41:99:17:21:82:D5:83:33:CB:21:37:A9:DC:7E: BE:E2:2F:68:35:02:21:00:F5:EF:83:7F:A3:CE:B8:A8: 43:5E:26:52:95:69:65:12:10:09:68:2C:B6:C5:96:6A: 86:EA:6E:91:63:E9:92:1E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4: 67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D Timestamp : Jul 9 21:28:58.029 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:34:2F:3D:02:72:39:F7:55:03:A7:71:1A: 62:5E:2C:C2:49:F4:50:A3:FE:7E:30:07:FB:E4:9F:EC: 55:5F:9A:8E:02:20:06:E2:A8:92:4C:7D:9B:AE:F8:24: D9:0E:8E:13:38:E6:50:60:BF:30:25:A8:89:D4:11:61: A7:7C:06:AA:2E:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-14T02:46:17+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R11
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
149
Serial (hex)
8A7D3E13D62F30EF2386BD29076B34F8
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

59:1E:9C:E6:C8:63:D3:A0:79:E9:FA:BE:14:78:C7:33:9A:26:B2:12:69:DD:E7:95:21:13:61:02:4A:E3:1A:44
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/
-----BEGIN CERTIFICATE-----
MIIFBjCCAu6gAwIBAgIRAIp9PhPWLzDvI4a9KQdrNPgwDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw
WhcNMjcwMzEyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
RW5jcnlwdDEMMAoGA1UEAxMDUjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuoe8XBsAOcvKCs3UZxD5ATylTqVhyybKUvsVAbe5KPUoHu0nsyQYOWcJ
DAjs4DqwO3cOvfPlOVRBDE6uQdaZdN5R2+97/1i9qLcT9t4x1fJyyXJqC4N0lZxG
AGQUmfOx2SLZzaiSqhwmej/+71gFewiVgdtxD4774zEJuwm+UE1fj5F2PVqdnoPy
6cRms+EGZkNIGIBloDcYmpuEMpexsr3E+BUAnSeI++JjF5ZsmydnS8TbKF5pwnnw
SVzgJFDhxLyhBax7QG0AtMJBP6dYuC/FXJuluwme8f7rsIU5/agK70XEeOtlKsLP
Xzze41xNG/cLJyuqC0J3U095ah2H2QIDAQABo4H4MIH1MA4GA1UdDwEB/wQEAwIB
hjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB
/wIBADAdBgNVHQ4EFgQUxc9GpOr0w8B6bJXELbBeki8m47kwHwYDVR0jBBgwFoAU
ebRZ5nu25eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAC
hhZodHRwOi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcG
A1UdHwQgMB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcN
AQELBQADggIBAE7iiV0KAxyQOND1H/lxXPjDj7I3iHpvsCUf7b632IYGjukJhM1y
v4Hz/MrPU0jtvfZpQtSlET41yBOykh0FX+ou1Nj4ScOt9ZmWnO8m2OG0JAtIIE38
01S0qcYhyOE2G/93ZCkXufBL713qzXnQv5C/viOykNpKqUgxdKlEC+Hi9i2DcaR1
e9KUwQUZRhy5j/PEdEglKg3l9dtD4tuTm7kZtB8v32oOjzHTYw+7KdzdZiw/sBtn
UfhBPORNuay4pJxmY/WrhSMdzFO2q3Gu3MUBcdo27goYKjL9CTF8j/Zz55yctUoV
aneCWs/ajUX+HypkBTA+c8LGDLnWO2NKq0YD/pnARkAnYGPfUDoHR9gVSp/qRx+Z
WghiDLZsMwhN1zjtSC0uBWiugF3vTNzYIEFfaPG7Ws3jDrAMMYebQ95JQ+HIBD/R
PBuHRTBpqKlyDnkSHDHYPiNX3adPoPAcgdF3H2/W0rmoswMWgTlLn1Wu0mrks7/q
pdWfS6PJ1jty80r2VKsM/Dj3YIDfbjXKdaFU5C+8bhfJGqU3taKauuz0wHVGT3eo
6FlWkWYtbt4pgdamlwVeZEW+LM7qZEJEsMNPrfC03APKmZsJgpWCDWOKZvkZcvjV
uYkQ4omYCTX5ohy+knMjdOmdH9c7SpqEWBDC86fiNex+O0XOMEZSa8DA
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →