DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

lump.net · 166.70.114.158:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=lump.net
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Valid from
2026-10-08T00:00:00+00:00
Expires
2027-01-06T23:59:59+00:00
Days remaining
57
Serial (hex)
13A4496BAFC9D82E0B20F5D72E02964A
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:lump.net, DNS:*.lump.net

SHA-256 fingerprint

FA:72:B2:C4:4F:D0:51:DA:C8:12:7A:BC:17:9F:B2:3B:F9:7B:A4:57:18:67:37:5B:E7:F0:C4:B1:9B:9E:0E:FB
Certificate extensions & PEM
authorityKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
subjectKeyIdentifier
AD:0B:51:52:34:8B:4D:F0:66:DA:6B:74:AF:EE:AF:76:97:31:AE:D1
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLECCDVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:lump.net, DNS:*.lump.net
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Oct 8 06:29:27.659 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:28:0F:2C:8A:F0:41:FD:F3:E4:ED:BC:44: 03:08:85:97:A9:AE:F3:C1:AB:8F:D1:1B:C7:12:3F:B1: A0:9F:8E:40:02:20:45:72:C6:77:B0:50:C4:D1:9E:50: 07:42:04:18:E2:A1:21:70:F8:E8:39:12:EC:D0:3E:89: A2:BD:4D:4C:ED:4B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Oct 8 06:29:27.861 2026 GMT Extensions: 00:00:05:00:1E:F5:01:5B Signature : ecdsa-with-SHA256 30:44:02:20:70:BD:A6:FE:75:82:9A:C1:44:AC:35:5F: 5B:C0:91:33:CE:28:5B:35:2B:2C:75:7C:8A:14:CA:F9: 14:78:CB:0C:02:20:55:9B:11:9E:84:B7:E4:23:A0:50: 9B:88:CC:A2:7F:2E:C0:16:83:78:E7:C2:8B:69:12:F9: E8:E9:E6:09:AE:A2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-10T03:51:41+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3239
Serial (hex)
C4E1C5BB00F0278F347BE4F85D63FCCA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BE:C8:4F:CE:0D:AA:42:3F:3B:3E:ED:38:EA:48:06:6C:C5:61:8F:52:44:AD:65:CD:9F:86:24:A8:13:FA:4C:3D
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4087
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIDRjCCAsugAwIBAgIQGp6v7G3o4ZtcGTFBto2Q3TAKBggqhkjOPQQDAzCBiDEL
MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl
eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT
JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMjEwMzIy
MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjBfMQswCQYDVQQGEwJHQjEYMBYGA1UEChMP
U2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIg
QXV0aGVudGljYXRpb24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAR2
+pmpbiDt+dd34wc7qNs9Xzjoq1WmVk/WSOrsfy2qw7LFeeyZYX8QeccCWvkEN/U0
NSt3zn8gj1KjAIns1aeibVvjS5KToID1AZTc8GgHHs3u/iVStSBDHBv+6xnOQ6Oj
ggEgMIIBHDAfBgNVHSMEGDAWgBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAdBgNVHQ4E
FgQU0SLaTFnxS18mOKqd1u7rDcP7qWEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB
/wQFMAMBAf8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEGA1UdIAQK
MAgwBgYEVR0gADBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVz
dC5jb20vVVNFUlRydXN0RUNDQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwNQYI
KwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu
Y29tMAoGCCqGSM49BAMDA2kAMGYCMQCMCyBit99vX2ba6xEkDe+YO7vC0twjbkv9
PKpqGGuZ61JZryjFsp+DFpEclCVy4noCMQCwvZDXD/m2Ko1HA5Bkmz7YQOFAiNDD
49IWa2wdT7R3DtODaSXH/BiXv8fwB9su4tU=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →