DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

iastate.edu · 52.252.224.122:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=Iowa O=Iowa State University CN=iastate.edu
Issuer
C=US O=InCommon, LLC CN=InCommon ECC OV SSL CA 3
Valid from
2026-07-15T00:00:00+00:00
Expires
2027-01-29T23:59:59+00:00
Days remaining
113
Serial (hex)
2D0E653A2F58E99114BD3D381F309A49
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:iastate.edu, DNS:*.info.iastate.edu, DNS:*.www.iastate.edu, DNS:iastate.net, DNS:info.iastate.edu, DNS:www.iastate.edu

SHA-256 fingerprint

EA:D3:18:07:CB:B2:EF:33:AE:BC:ED:26:BC:D2:4B:F4:56:B6:34:E6:14:50:C7:6C:FA:F2:5C:19:E0:11:FE:4B
Certificate extensions & PEM
authorityKeyIdentifier
CE:70:EF:34:54:2C:3E:98:38:71:22:57:7B:2B:44:59:90:51:BE:19
subjectKeyIdentifier
B6:0D:6E:0A:D2:CC:EE:2F:14:BF:9C:1B:DB:91:D4:D1:D7:F9:7B:2E
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonECCOVSSLCA3.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonECCOVSSLCA3.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 15 14:46:45.234 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:34:F8:68:66:36:08:20:74:01:A2:47:5F: 86:E8:84:F6:A1:CA:DE:0D:30:FE:FC:00:6D:0D:72:1F: B1:27:A8:1E:02:21:00:C2:72:6F:83:3F:DA:8E:21:2F: 4D:0B:61:39:F2:E7:83:BB:C1:6C:BC:71:DF:EB:17:8F: CD:04:04:FF:5E:11:89 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jul 15 14:46:46.255 2026 GMT Extensions: 00:00:05:00:06:20:D4:90 Signature : ecdsa-with-SHA256 30:46:02:21:00:C8:F2:3A:24:1D:33:81:22:B9:2D:65: CA:5E:73:38:B2:E6:CE:CF:9C:13:E6:F4:90:C3:0F:B0: 88:47:98:79:20:02:21:00:BA:54:07:7A:5F:CC:50:96: C0:C1:85:D1:5B:78:A8:1F:B8:51:07:1D:7A:45:B1:46: 61:C2:13:FF:1C:35:D7:49 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jul 15 14:46:45.631 2026 GMT Extensions: 00:00:05:00:00:4C:BB:06 Signature : ecdsa-with-SHA256 30:46:02:21:00:C4:43:D7:DE:E0:1B:4A:D5:9F:AF:AB: 81:AC:E1:6A:4C:CA:C1:3C:3C:F4:7C:87:01:8C:97:FA: 1D:5F:37:8F:F2:02:21:00:86:81:9D:B1:87:DD:C1:EA: CC:91:49:B2:CF:C1:8A:36:C9:D2:06:30:57:16:29:B7: D9:19:A7:90:6B:B8:A3:4C
subjectAltName
DNS:iastate.edu, DNS:*.info.iastate.edu, DNS:*.www.iastate.edu, DNS:iastate.net, DNS:info.iastate.edu, DNS:www.iastate.edu
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-08T22:17:14+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=US O=InCommon, LLC CN=InCommon ECC OV SSL CA 3
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2025-11-06T00:00:00+00:00
Expires
2035-11-05T23:59:59+00:00
Days remaining
3315
Serial (hex)
38793497CF4D26FDBDE3CAD5DED545FF
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

22:7B:61:E5:3F:13:1C:EF:CB:81:E8:89:9E:D9:82:9F:7E:78:05:86:64:7F:3F:98:DF:2A:BE:C2:16:7F:40:5B
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
CE:70:EF:34:54:2C:3E:98:38:71:22:57:7B:2B:44:59:90:51:BE:19
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----
MIIDNjCCArygAwIBAgIQOHk0l89NJv2948rV3tVF/zAKBggqhkjOPQQDAzBfMQsw
CQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1T
ZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwHhcN
MjUxMTA2MDAwMDAwWhcNMzUxMTA1MjM1OTU5WjBIMQswCQYDVQQGEwJVUzEWMBQG
A1UEChMNSW5Db21tb24sIExMQzEhMB8GA1UEAxMYSW5Db21tb24gRUNDIE9WIFNT
TCBDQSAzMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEI+ejNeQ1LxNI1+tUq8zJ
qYGVjJtq0ehfh/urxTAnMdocLMkAYGW4bc3hUgnDq2P2bpAnt8kvEHsSms9+eZ9C
NKOCAW8wggFrMB8GA1UdIwQYMBaAFNEi2kxZ8UtfJjiqndbu6w3D+6lhMB0GA1Ud
DgQWBBTOcO80VCw+mDhxIld7K0RZkFG+GTAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0T
AQH/BAgwBgEB/wIBADATBgNVHSUEDDAKBggrBgEFBQcDATATBgNVHSAEDDAKMAgG
BmeBDAECAjBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29t
L1NlY3RpZ29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RFNDYuY3JsMIGE
BggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5j
b20vU2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdEU0Ni5wN2Mw
IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMAoGCCqGSM49BAMD
A2gAMGUCMQCgENV+enAFTkpPIXg6u7yCsAq+bkjiJvBsVonfnqY0hVAftb8D39Bt
5Wf8NlBZRF4CMF/znj8ZRYNUgxY2o0/nzEiJ3hJBuYuUmfpbYc5BcBsy+vItNAQ7
mHOhDI5rvYg6LA==
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4120
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4120
Serial (hex)
5C8B99C55A94C5D27156DECD8980CC26
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4F:F4:60:D5:4B:9C:86:DA:BF:BC:FC:57:12:E0:40:0D:2B:ED:3F:BC:4D:4F:BD:AA:86:E0:6A:DC:D2:A9:AD:7A
Certificate extensions & PEM
subjectKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →