DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.nadejda.net · 188.126.0.41:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=mail.nadejda.net
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Valid from
2026-01-11T00:00:00+00:00
Expires
2027-02-02T23:59:59+00:00
Days remaining
95
Serial (hex)
4560CB98A20E88A4BAF5C797E886EF24
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail.nadejda.net, DNS:www.mail.nadejda.net

SHA-256 fingerprint

BF:42:8D:87:94:31:C1:69:B4:4F:71:84:7C:84:48:B9:57:49:35:10:8B:A9:32:7E:BB:6A:90:A4:96:80:2E:7E
Certificate extensions & PEM
authorityKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
subjectKeyIdentifier
C6:C0:FB:75:9A:89:7A:B6:83:52:B2:69:8E:9F:0A:CF:AC:FF:AF:58
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:mail.nadejda.net, DNS:www.mail.nadejda.net
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 11 10:22:08.993 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7C:07:46:7B:66:CD:15:D9:6D:FA:AC:78: A9:53:1F:31:96:10:93:47:1F:A0:CD:C3:7B:87:CA:F2: 2F:F3:A7:E2:02:21:00:BF:53:DD:18:4A:35:B5:6C:FE: 6A:55:B1:69:FB:37:28:E3:38:24:8D:66:5A:8B:2F:BA: EE:B8:D5:60:92:20:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jan 11 10:22:09.186 2026 GMT Extensions: 00:00:05:00:01:4B:E0:5B Signature : ecdsa-with-SHA256 30:44:02:20:5B:6E:20:98:CB:6D:F3:9B:77:F9:92:D1: FE:7D:B1:EE:BB:A2:A4:D9:4D:42:26:2F:7B:DE:04:91: E5:48:48:0C:02:20:7F:32:66:D8:99:DE:4A:F7:73:D6: 6A:33:BB:C9:04:6E:FD:63:13:E0:8F:91:70:7A:47:93: 67:32:70:D6:82:06 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jan 11 10:22:08.849 2026 GMT Extensions: 00:00:05:00:00:0B:A7:DC Signature : ecdsa-with-SHA256 30:46:02:21:00:D3:AE:F5:C5:3A:45:CB:B0:4C:74:DD: 39:39:7E:8C:39:E9:43:92:2D:83:EE:9E:46:59:4B:5F: DE:85:72:4F:0D:02:21:00:E4:D9:60:EE:8E:44:83:8A: 4B:20:F3:E1:64:25:6B:F2:C8:FE:16:17:98:15:AF:6B: 7F:51:42:AB:09:9C:D8:B4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-30T16:06:25+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3430
Serial (hex)
397A66CC2756362E0DAA87CA6EABE3B1
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →