DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

huawei.cn · 1.1.1.1:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`cloudflare-dns.com' did not match expected CN=`huawei.cn'

Certificate verification failed

Subject
C=US ST=California L=San Francisco O=Cloudflare, Inc. CN=cloudflare-dns.com
Issuer
C=US ST=Texas L=Houston O=SSL Corp CN=SSL.com SSL Intermediate CA ECC R2
Valid from
2025-12-31T19:20:01+00:00
Expires
2026-12-21T19:20:01+00:00
Days remaining
90
Serial (hex)
4ED03304C46B87A8C2EB5569DB9EBA0C
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:cloudflare-dns.com, DNS:*.cloudflare-dns.com, IP Address:1.0.0.1, IP Address:1.1.1.1, IP Address:162.159.36.1, IP Address:162.159.46.1, IP Address:2606:4700:4700:0:0:0:0:1001, IP Address:2606:4700:4700:0:0:0:0:1111, IP Address:2606:4700:4700:0:0:0:0:64, IP Address:2606:4700:4700:0:0:0:0:6400, DNS:one.one.one.one

SHA-256 fingerprint

E3:B0:28:26:78:9D:65:3D:22:4D:3E:DA:CB:E4:E8:77:CB:72:86:FC:4C:92:26:72:F6:22:67:41:CA:57:AD:65
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
0D:74:66:0A:5E:9F:E2:2C:EC:D5:C2:5D:25:04:7F:75:32:BA:FF:7D
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-SubCA-SSL-ECC-384-R2.cer OCSP - URI:http://ocsps.ssl.com
subjectAltName
DNS:cloudflare-dns.com, DNS:*.cloudflare-dns.com, IP Address:1.0.0.1, IP Address:1.1.1.1, IP Address:162.159.36.1, IP Address:162.159.46.1, IP Address:2606:4700:4700:0:0:0:0:1001, IP Address:2606:4700:4700:0:0:0:0:1111, IP Address:2606:4700:4700:0:0:0:0:64, IP Address:2606:4700:4700:0:0:0:0:6400, DNS:one.one.one.one
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.38064.1.3.1.2
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-SubCA-SSL-ECC-384-R2.crl
subjectKeyIdentifier
2C:28:EC:54:20:B6:86:00:26:55:AA:69:BB:B6:C3:65:2E:16:FA:1F
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Dec 31 19:30:02.731 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7B:90:06:D3:61:01:BE:2F:28:63:84:1C: 21:7B:55:53:EB:2C:70:89:CE:4E:B7:2C:80:A8:08:1B: 74:D3:34:F5:02:21:00:C9:68:26:AA:91:44:0E:16:18: 7F:BB:42:7D:B3:C7:28:81:50:D2:6E:C5:02:77:E4:BC: 06:ED:77:18:AD:62:BD Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Dec 31 19:30:02.844 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CA:F8:E7:8A:37:4E:76:93:29:7D:B2: 4C:6A:AA:F7:23:33:41:27:32:30:28:A9:F5:BF:C3:6A: 03:26:17:BE:2B:02:21:00:D8:4D:4C:AF:A0:27:A9:53: 0C:61:E3:11:32:A0:BB:22:12:F8:11:9A:12:7C:9B:B5: 25:1B:C5:AB:09:4B:40:68 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Dec 31 19:30:02.930 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:42:71:38:15:48:FB:6E:98:78:8E:73:99: 80:04:4D:39:48:DA:27:85:0F:BF:1C:A9:4C:FE:66:79: 7E:E8:F2:02:02:21:00:B5:7D:47:D7:99:A4:32:95:B3: 8A:3A:F9:8F:2E:41:84:08:B2:19:5C:E9:DA:C3:49:2E: 4E:8D:E9:F7:43:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-22T16:33:18+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US ST=Texas L=Houston O=SSL Corp CN=SSL.com SSL Intermediate CA ECC R2
Issuer
C=US ST=Texas L=Houston O=SSL Corporation CN=SSL.com Root Certification Authority ECC
Valid from
2019-03-07T19:42:42+00:00
Expires
2034-03-03T19:42:42+00:00
Days remaining
2719
Serial (hex)
1CD71212DE1510D91282DA33104A102F
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

94:8B:71:11:AF:42:F5:46:D5:79:CF:F5:CE:2B:DE:C8:21:34:DD:99:14:84:2B:DD:B0:C5:28:72:EB:60:4E:39
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
82:D1:85:73:30:E7:35:04:D3:8E:02:92:FB:E5:A4:D1:C4:21:E8:CD
authorityInfoAccess
CA Issuers - URI:http://www.ssl.com/repository/SSLcom-RootCA-ECC-384-R1.crt OCSP - URI:http://ocsps.ssl.com
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/ssl.com-ecc-RootCA.crl
subjectKeyIdentifier
0D:74:66:0A:5E:9F:E2:2C:EC:D5:C2:5D:25:04:7F:75:32:BA:FF:7D
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →