THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

itself.cz · 81.200.48.35:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=business.nej.cz
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL RSA DV SSL CA 2
Valid from
2026-09-19T00:00:00+00:00
Expires
2026-12-18T23:59:59+00:00
Days remaining
66
Serial (hex)
2F39D42282836A6909D9868B4B83072E
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:business.nej.cz, DNS:itself.cz, DNS:www.business.nej.cz, DNS:www.itself.cz

SHA-256 fingerprint

16:36:A3:76:E9:FB:98:3B:52:D1:69:F9:87:E1:8F:68:00:93:EF:BA:2B:56:9F:F6:CF:10:97:B1:9D:5D:88:E2
Certificate extensions & PEM
authorityKeyIdentifier
4B:BE:FA:76:84:23:44:04:B9:CE:BE:31:6F:E9:F5:32:06:FF:0C:57
subjectKeyIdentifier
3D:29:12:35:B7:42:76:65:15:FE:90:45:85:AA:9A:34:FA:95:C1:99
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLRSADVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:business.nej.cz, DNS:itself.cz, DNS:www.business.nej.cz, DNS:www.itself.cz
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 74:DB:9D:58:F7:D4:7E:9D:FD:78:7A:16:2A:99:1C:18: CF:69:8D:A7:C7:29:91:8C:9A:18:B0:45:0D:BA:44:BC Timestamp : Sep 19 06:02:38.084 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2C:BB:4B:D5:4D:A5:B8:65:49:D3:81:0C: BF:CD:96:1B:5F:B7:57:0E:8E:31:69:12:0F:13:31:4C: 71:D4:97:DE:02:20:39:F2:E1:93:E9:8F:F4:04:77:75: 01:6A:AE:24:F3:F2:47:0E:0F:57:E0:E2:91:13:D3:66: 11:94:17:2B:BD:ED Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:8B:9D:6B:0F:FE:BF:81:B4:79:39:C6:D2:31:0A:86: D6:D1:02:D4:F0:46:E2:18:2C:9D:E3:5F:5E:26:25:EF Timestamp : Sep 19 06:02:39.364 2026 GMT Extensions: 00:00:05:00:42:CA:E5:C3 Signature : ecdsa-with-SHA256 30:44:02:20:6C:0B:83:A2:3E:50:3F:E1:AB:21:60:AC: C2:25:93:FA:84:A3:58:84:69:9D:E9:17:D8:F0:34:34: 92:B7:80:6D:02:20:6F:6A:BD:56:30:71:A3:46:B2:9F: 48:FB:D0:4C:F4:5E:B9:26:8C:5E:0D:F0:61:3B:8D:63: 23:7A:D8:02:F2:F4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-13T17:43:52+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL RSA DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3267
Serial (hex)
D0A908255F8E50E5F3396D1114702A37
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EC:9D:6B:CA:B9:81:8B:7D:D5:9E:D6:1D:A2:3A:65:8A:96:A9:C4:E9:50:ED:EE:0D:2D:A9:3E:7C:F2:17:47:80
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
4B:BE:FA:76:84:23:44:04:B9:CE:BE:31:6F:E9:F5:32:06:FF:0C:57
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →