DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mail.douran.ir · 217.170.250.74:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=mail.douran.ir
Issuer
C=US O=Let's Encrypt CN=R12
Valid from
2026-02-07T17:15:11+00:00
Expires
2026-05-08T17:15:10+00:00
Days remaining
-181
Serial (hex)
051A3EAD6A33272E6F343300F9A8A7B7B4E0
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

DNS:mail.douran.ir

SHA-256 fingerprint

48:63:EF:4B:0D:F2:78:0E:F9:C6:0F:CB:06:3A:A3:C4:D2:26:86:30:74:70:DA:5D:43:7E:B2:B9:AC:DA:9C:BA
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
3F:09:8F:74:8C:63:52:BB:BD:6F:F9:3F:0D:06:8F:29:C6:D6:AE:28
authorityKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityInfoAccess
CA Issuers - URI:http://r12.i.lencr.org/
subjectAltName
DNS:mail.douran.ir
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r12.c.lencr.org/97.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A: A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2 Timestamp : Feb 7 18:13:41.208 2026 GMT Extensions: 00:00:05:00:08:DC:57:EE Signature : ecdsa-with-SHA256 30:45:02:21:00:F0:3A:B7:33:52:DE:C9:04:57:AB:EB: 45:A3:F8:59:DB:5B:89:11:A5:09:C1:83:47:D9:43:AD: 6A:44:5F:FE:22:02:20:5D:AB:1F:E6:AC:A0:B3:9B:11: 7B:01:69:0F:E2:88:3B:BC:6D:09:CD:86:CB:EC:4C:F5: 06:E9:2A:F2:7B:FD:34 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Feb 7 18:13:43.098 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:78:ED:83:86:E6:99:50:BA:A4:FE:86:5B: C8:FA:16:65:48:8D:80:D1:84:09:C1:2F:A1:42:BF:B5: C9:CA:68:3A:02:20:73:5D:9A:18:F1:8B:68:FC:27:33: 47:B0:3C:FF:33:C4:CA:A3:41:75:7D:51:56:23:79:77: 9D:06:C0:4B:C6:AB
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-11-04T22:18:12+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R12
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
128
Serial (hex)
C212324B70A9B49171DC40F7E285263C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:1F:CE:77:84:01:68:99:A5:A0:02:03:A9:EF:C8:0F:18:EB:BD:75:58:07:17:ED:C1:55:35:80:93:08:36:EC
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →