DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ito.gov.ir · 2001:4188:1a:100::11:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.ito.gov.ir
Issuer
C=PL O=Asseco Data Systems S.A. CN=Certum DV TLS G2 R39 CA
Valid from
2026-08-23T07:28:10+00:00
Expires
2027-03-10T07:28:09+00:00
Days remaining
156
Serial (hex)
13A753E982B85467AFF59C5FAC31AE1B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.ito.gov.ir, DNS:ito.gov.ir

SHA-256 fingerprint

BD:A8:60:27:16:C8:89:2A:FF:7C:BB:D7:DB:3E:BE:C7:F0:9E:D8:46:C4:3E:FA:66:96:C4:86:D6:06:78:00:FB
Certificate extensions & PEM
basicConstraints
CA:FALSE
crlDistributionPoints
Full Name: URI:http://certumdvtlsg2r39ca.crl.certum.pl/certumdvtlsg2r39ca.crl
authorityInfoAccess
OCSP - URI:http://certumdvtlsg2r39ca.ocsp-certum.com CA Issuers - URI:http://certumdvtlsg2r39ca.repository.certum.pl/certumdvtlsg2r39ca.cer
authorityKeyIdentifier
33:A8:77:B7:01:38:6F:5F:1F:24:24:A2:1E:6C:14:E3:6E:22:03:DF
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.2.616.1.113527.2.101.1
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
keyUsage
Digital Signature, Key Encipherment
subjectAltName
DNS:*.ito.gov.ir, DNS:ito.gov.ir
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 23 07:28:11.243 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:EA:F3:BA:19:48:F6:50:64:EB:4E:C1: F5:3A:2A:E8:38:1C:73:6B:31:60:BF:5D:72:96:7F:68: A3:F2:35:BD:1E:02:20:27:8B:F7:68:35:16:23:9C:BA: B7:3E:D5:90:DD:A3:B6:A2:60:6B:73:F0:44:21:90:61: 50:32:54:EB:4D:98:18 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 23 07:28:11.325 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A6:86:48:FC:A4:8D:25:63:99:B3:3B: 08:24:D6:BF:10:44:B3:7D:98:18:85:9D:83:E1:A4:3F: 05:EA:9C:5B:D9:02:20:64:E5:6D:72:94:A4:10:FF:07: 5B:30:26:93:56:E8:6C:9C:A8:A2:23:55:CE:E2:52:59: E3:CB:B8:83:A4:DD:C8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 23 07:28:11.789 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0A:AB:BF:E2:6E:48:D5:A9:7D:66:B9:6B: 22:6C:B8:87:C5:D0:55:CC:A1:E9:E5:08:E0:70:BA:39: AA:56:4D:F3:02:21:00:9C:E9:BD:B1:A4:D5:D7:94:85: CD:53:86:18:ED:F3:15:4C:4E:E6:00:77:17:2E:C1:75: 87:E6:BB:A8:8A:F9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-04T14:11:02+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=PL O=Asseco Data Systems S.A. CN=Certum DV TLS G2 R39 CA
Issuer
C=PL O=Asseco Data Systems S.A. OU=Certum Certification Authority CN=Certum Trusted Root CA
Valid from
2024-06-18T07:41:22+00:00
Expires
2039-06-05T07:41:22+00:00
Days remaining
4626
Serial (hex)
A82DD9E5DCAFDF13205E70043E6B95A8
Signature
RSA-SHA512
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

83:C0:A5:A7:68:44:C8:40:DF:AF:82:0F:FD:02:AD:F6:57:3A:26:82:3E:F6:AF:75:8A:33:84:A0:AC:04:40:83
Certificate extensions & PEM
authorityInfoAccess
CA Issuers - URI:http://subca.repository.certum.pl/ctrca.cer OCSP - URI:http://subca.ocsp-certum.com
authorityKeyIdentifier
8C:FB:1C:75:BC:02:D3:9F:4E:2E:48:D9:F9:60:54:AA:C4:B3:4F:FA
basicConstraints
CA:TRUE, pathlen:0
crlDistributionPoints
Full Name: URI:http://subca.crl.certum.pl/ctrca.crl
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
keyUsage
Certificate Sign, CRL Sign
certificatePolicies
Policy: X509v3 Any Policy
subjectKeyIdentifier
33:A8:77:B7:01:38:6F:5F:1F:24:24:A2:1E:6C:14:E3:6E:22:03:DF
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →