DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.dhh.si · 212.44.96.3:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`*.controlpanel.si' did not match expected CN=`mail.dhh.si'

Certificate verification failed

Subject
CN=*.controlpanel.si
Issuer
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Valid from
2026-08-20T10:58:50+00:00
Expires
2027-03-06T11:03:05+00:00
Days remaining
160
Serial (hex)
3532FAC17FFB2535BA66997A9944C0C3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.controlpanel.si, DNS:controlpanel.si

SHA-256 fingerprint

A9:47:C3:10:54:BA:1E:EF:51:39:D6:FC:E5:EB:B2:29:1E:DA:6D:03:7E:90:5E:7D:A6:C2:5D:5E:86:2A:F7:03
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-I-RSA-R1.cer OCSP - URI:http://ocsps.ssl.com
subjectAltName
DNS:*.controlpanel.si, DNS:controlpanel.si
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.38064.1.3.1.1
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSL.com-TLS-I-RSA-R1.crl
subjectKeyIdentifier
03:2C:55:01:B0:D7:7E:19:D2:08:12:25:B3:28:92:85:B9:A7:6E:17
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Aug 20 11:08:51.322 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C9:EF:62:05:9A:DA:3E:32:C3:9E:50: 83:FD:2A:1D:CC:2F:A0:F4:22:D5:4D:79:C5:ED:03:DB: 83:BD:3E:96:17:02:20:0A:E7:68:AD:BF:A5:98:80:FF: 6A:34:15:DA:53:F9:1F:10:39:59:91:FB:AE:A7:D5:03: 05:51:1F:EB:92:22:57 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Aug 20 11:08:51.330 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:22:44:B7:4B:3A:B0:A1:A7:ED:37:04:57: 1F:F5:AE:17:E7:AE:90:C2:31:60:40:D9:74:8B:66:20: CD:E9:CC:F0:02:20:1E:45:AA:23:75:6C:57:88:9C:A6: C0:57:2B:10:0C:42:8C:C0:75:68:E6:B4:64:36:F2:06: A0:16:5E:19:15:84 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 20 11:08:51.337 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3C:2B:EC:CB:13:6F:AF:95:0B:76:3A:5C: 45:05:98:07:6B:E6:7C:CE:04:3E:3C:C8:9A:1D:BF:C0: 6D:CF:96:BB:02:21:00:DD:8B:5E:F5:3B:B3:13:65:19: A4:8E:41:04:01:DD:47:2F:B4:0A:FD:70:31:D9:26:F3: 5A:D6:BE:C4:E0:6B:7F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-27T03:05:43+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Issuer
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Valid from
2022-10-21T17:02:03+00:00
Expires
2032-10-18T17:02:02+00:00
Days remaining
2213
Serial (hex)
26B9FFE4596FA61E1AF21C63D672748A
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BF:BC:39:E9:FA:2B:84:C9:A9:23:37:E2:34:4E:E2:38:1D:8D:3D:3A:E8:EA:75:EF:4E:48:E5:80:7E:D8:0C:69
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.ssl.com/repository
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-RSA.crl
subjectKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Issuer
C=US O=SecureTrust Corporation CN=SecureTrust CA
Valid from
2025-12-17T11:22:57+00:00
Expires
2029-12-30T17:22:57+00:00
Days remaining
1190
Serial (hex)
07EB4274FC1D305BE94C9883277F8467E2144F
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1B:1D:E0:69:90:CD:0B:30:5E:2E:12:48:06:10:3B:1A:DC:FF:C4:99:F2:12:50:4D:C7:7F:48:DD:0A:D6:22:09
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityKeyIdentifier
42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3 Policy: 1.3.6.1.4.1.38064.1.3.1.1 Policy: 1.3.6.1.4.1.38064.1.3.1.2 Policy: 1.3.6.1.4.1.38064.1.3.1.3 Policy: 1.3.6.1.4.1.38064.1.3.1.4 Policy: 1.3.6.1.4.1.38064.1.3.1.5 Policy: 1.3.6.1.4.1.38064.1.3.1.6
crlDistributionPoints
Full Name: URI:http://crl.sslsecuretrust.com/STCA.crl
authorityInfoAccess
OCSP - URI:http://ocsp.sslsecuretrust.com/ CA Issuers - URI:http://certs.sslsecuretrust.com/issuers/STCA.crt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →