DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.netwitz.net · 192.26.140.2:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=mail.netwitz.net
Issuer
C=US O=Let's Encrypt CN=YE1
Valid from
2026-10-06T19:25:56+00:00
Expires
2027-01-04T19:25:55+00:00
Days remaining
73
Serial (hex)
062D97036FAF4C721421A42EF4EAD7FA1DB4
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:mail.netwitz.net

SHA-256 fingerprint

0F:EF:06:B6:AF:81:1E:DB:7C:27:4B:38:44:57:7B:9A:06:63:B7:3F:A8:44:45:46:81:98:C5:C4:45:27:C8:5D
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
49:D1:5B:48:B5:3F:71:97:D4:EF:AF:01:EC:EA:80:5D:95:CC:85:B4
authorityKeyIdentifier
BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8
authorityInfoAccess
CA Issuers - URI:http://ye1.i.lencr.org/
subjectAltName
DNS:mail.netwitz.net
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://ye1.c.lencr.org/53.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Oct 6 20:24:26.532 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B0:FD:D2:0A:EB:BD:28:C9:54:95:42: E0:F6:06:4C:75:CE:2B:C4:2A:EC:8C:8A:A1:C0:A7:AB: A1:46:C0:17:4F:02:21:00:C7:F1:D4:90:73:E4:AD:29: 1D:49:77:EB:72:EB:57:81:BF:26:13:B6:49:2D:1B:F9: 2B:5E:86:F6:8F:CB:48:6E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:E8:22:FC:2B:AB:0E:92:EE:D0:E9:FA:D6:96:64:60: 27:76:D0:17:60:E0:89:05:09:C9:23:A1:B0:3F:C3:7F Timestamp : Oct 6 20:24:23.756 2026 GMT Extensions: 00:00:05:00:07:71:D3:FA Signature : ecdsa-with-SHA256 30:44:02:20:59:AE:31:0A:16:74:56:68:A1:5F:68:BB: D6:32:82:0B:CD:23:67:3B:80:CD:5E:B2:84:AF:2E:13: 45:66:71:5C:02:20:35:98:FF:E1:15:C5:2D:A7:0E:59: F8:43:4B:86:6F:5E:79:BD:19:F5:A2:32:2B:9C:5B:45: 93:58:EB:8D:EE:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-23T00:43:01+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=YE1
Issuer
C=US O=ISRG CN=Root YE
Valid from
2025-09-03T00:00:00+00:00
Expires
2028-09-02T23:59:59+00:00
Days remaining
680
Serial (hex)
5DDD70DD31F801C85C186A7A04B80AFE
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A2:37:2D:06:43:1E:97:16:36:5E:EE:D4:7E:C0:20:35:14:97:D1:82:FC:C0:38:E4:57:E5:81:68:A0:3C:AC:07
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8
authorityKeyIdentifier
A3:C8:26:5A:8E:A1:4C:D0:35:63:FC:9B:23:C8:3A:AE:56:F3:4F:56
authorityInfoAccess
CA Issuers - URI:http://ye.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://ye.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=ISRG CN=Root YE
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X2
Valid from
2026-05-13T00:00:00+00:00
Expires
2032-09-02T23:59:59+00:00
Days remaining
2141
Serial (hex)
872165FC34B6E5FBA8ADD5B3705FB53A
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

0F:C0:90:1C:CA:2B:AE:9E:9F:DB:B0:2D:50:D0:2F:10:94:F7:B3:66:72:08:69:91:B9:E8:97:62:6D:C4:85:F0
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE
subjectKeyIdentifier
A3:C8:26:5A:8E:A1:4C:D0:35:63:FC:9B:23:C8:3A:AE:56:F3:4F:56
authorityKeyIdentifier
7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
authorityInfoAccess
CA Issuers - URI:http://x2.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x2.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →