DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mail.adsib.gob.bo · 166.114.1.43:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=mail.adsib.gob.bo
Issuer
C=US O=Let's Encrypt CN=R13
Valid from
2025-12-10T11:12:42+00:00
Expires
2026-03-10T11:12:41+00:00
Days remaining
-246
Serial (hex)
05D8476C3458DDDC37EB227FAC1549DE8A19
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail.adsib.gob.bo

SHA-256 fingerprint

D7:D9:AE:E5:C8:BB:93:AD:90:8F:7D:3E:A4:B0:4B:4F:DF:2F:19:54:14:9A:D7:A1:DD:05:7F:84:AD:F2:5E:2B
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
88:B0:80:30:3B:42:83:6B:5C:3D:95:1C:83:3D:F2:F9:02:D5:D7:90
authorityKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityInfoAccess
CA Issuers - URI:http://r13.i.lencr.org/
subjectAltName
DNS:mail.adsib.gob.bo
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r13.c.lencr.org/26.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB: 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0 Timestamp : Dec 10 12:11:12.865 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B8:AD:AC:E8:11:96:3A:A5:47:8A:46: DE:02:DC:1D:DD:CC:E0:ED:E8:93:25:DF:C5:3A:E9:4C: C0:A2:94:DF:06:02:21:00:EE:3B:EB:B5:C3:BA:8D:FC: 9D:21:48:49:E5:07:C7:ED:C2:FD:BE:49:71:A2:ED:5D: 57:DD:58:19:3D:26:27:CB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF: C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA Timestamp : Dec 10 12:11:14.965 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:AE:F5:14:0C:C5:2D:CE:D8:F7:0F:89: 49:31:D8:46:D5:D3:BD:56:BF:D2:0F:6D:46:0B:33:81: AA:41:D0:65:F3:02:20:40:D8:E0:46:3E:30:AF:4E:D2: 5F:4D:6A:EF:89:99:84:77:1B:9D:C2:FD:45:40:8F:8F: 2A:2F:75:D7:D0:6D:0B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-11-10T23:00:41+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R13
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
122
Serial (hex)
5A00F212D8D4B480F3924157EA298305
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

D3:B1:28:21:6A:84:3F:8E:F1:32:15:01:F5:DF:52:A5:DF:52:93:9E:E2:C1:92:97:71:2C:D3:DE:4D:41:93:54
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →