DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

iskon.hr · 213.191.133.200:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=HR L=Zagreb O=Hrvatski Telekom d.d. CN=*.iskon.hr
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
Valid from
2026-08-11T00:00:00+00:00
Expires
2027-02-25T23:59:59+00:00
Days remaining
152
Serial (hex)
033FCF3891CA6DEEC2F8F24B47C55FD6
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.iskon.hr, DNS:iskon.hr

SHA-256 fingerprint

40:59:44:8E:14:59:6F:51:73:CC:66:A0:A4:CF:65:3B:CA:6D:33:04:DE:5C:24:88:A8:56:0E:72:A7:6B:7F:E5
Certificate extensions & PEM
authorityKeyIdentifier
A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
subjectKeyIdentifier
34:8F:EE:26:24:9A:FC:0F:F7:FB:F5:10:0D:7A:A2:8F:75:4A:B8:B6
subjectAltName
DNS:*.iskon.hr, DNS:iskon.hr
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 11 10:03:40.419 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D7:C6:F8:6F:7C:2C:81:7B:66:EC:2A: 8B:65:2A:FF:C1:A9:F6:13:E6:8A:04:BD:34:18:5C:4F: 89:D4:02:0D:7D:02:20:79:BD:39:91:8B:B3:D9:C1:09: 84:08:03:FB:46:DE:F2:6A:06:12:45:CC:00:82:97:35: F9:AF:00:4E:20:8E:EA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 11 10:03:40.465 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F0:7F:C6:8D:B9:C1:9C:7E:AF:56:A0: 24:F0:55:E6:56:47:3A:7A:EE:71:18:03:29:17:39:60: A2:20:FA:D8:1E:02:21:00:F5:97:15:98:84:10:DC:88: 22:FF:FC:E3:4B:EF:F5:31:A8:E8:91:C0:1C:67:B9:1E: E9:67:BA:F7:0A:75:5D:95 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 11 10:03:40.504 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AE:3D:67:BB:D4:1C:7A:80:75:3B:F5: 37:AD:26:62:7D:5B:BF:3B:65:55:35:4C:88:DB:63:4A: 92:4C:B9:DB:85:02:21:00:C8:B4:B2:68:6D:D1:BA:75: 5D:D5:A5:FC:A3:B6:C4:3B:1E:E2:F3:F2:2D:1E:75:2E: 48:2C:17:B0:5D:10:3E:2C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-26T01:02:04+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:24:25+00:00
Expires
2027-11-02T12:24:25+00:00
Days remaining
402
Serial (hex)
090EE8C5DE5BFA62D2AE2FF7097C4857
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2
Certificate extensions & PEM
subjectKeyIdentifier
A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →