DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.nova.net.pk · 38.242.222.79:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=mail.nova.net.pk
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL RSA DV SSL CA 2
Valid from
2026-06-08T00:00:00+00:00
Expires
2026-09-06T23:59:59+00:00
Days remaining
-16
Serial (hex)
A8E7E0A028C8D0811356F5E29318870B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail.nova.net.pk

SHA-256 fingerprint

C0:83:19:A5:42:3C:60:C7:04:AF:AE:A4:CE:C3:02:15:42:B5:37:32:4E:C8:8B:B8:0A:27:F1:9D:3F:0E:52:51
Certificate extensions & PEM
authorityKeyIdentifier
4B:BE:FA:76:84:23:44:04:B9:CE:BE:31:6F:E9:F5:32:06:FF:0C:57
subjectKeyIdentifier
96:68:5E:82:E9:9E:73:50:EB:FD:D8:4E:10:FB:B8:55:A1:DF:65:BE
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLRSADVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 8 07:04:33.907 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DC:DA:AA:D7:78:5B:72:34:0C:D0:74: 6F:46:B5:A0:58:10:51:36:4A:FE:FD:D7:76:29:85:BF: 3B:4C:5C:B2:B6:02:21:00:81:B6:4E:97:FC:40:1C:2F: 20:D2:AB:C0:7B:38:70:ED:97:FE:B3:E8:93:7F:20:95: C5:27:3C:8F:3C:1D:6A:EA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Jun 8 07:04:33.847 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A6:FB:19:9E:26:FD:DC:50:B1:02:B5: A4:48:8A:F2:30:D0:38:B8:97:FA:E0:E9:86:B0:B0:48: 44:D3:82:A2:30:02:20:26:D5:A1:42:39:EA:9D:1C:A8: 6F:DB:0D:05:70:78:E7:EC:73:5A:01:D1:E5:D3:9A:1E: 65:30:46:72:E2:F9:BF
subjectAltName
DNS:mail.nova.net.pk
-----BEGIN CERTIFICATE-----
MIIFkDCCA/igAwIBAgIRAKjn4KAoyNCBE1b14pMYhwswDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCQVQxFTATBgNVBAoTDFplcm9TU0wgR21iSDEgMB4GA1UEAxMX
WmVyb1NTTCBSU0EgRFYgU1NMIENBIDIwHhcNMjYwNjA4MDAwMDAwWhcNMjYwOTA2
MjM1OTU5WjAbMRkwFwYDVQQDExBtYWlsLm5vdmEubmV0LnBrMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyMtZ9hiJUpSRlTknOK3zZOJvwgTH6eoi2Ha
+OVTs2e6WvqE1iR9i5o45XM9Gt+NNmp63XWAJzubYDKywYtNsJJM82wV88YAkx9w
g8lRvsp9QM7mumu65+hqSSAA6ZqWfd9GvWgJooUnPpxM2zsw6E0V3yJ4z27kpcPh
J/B6F7gplLhmXM+rokFU0yFIW3GqShEkDHA04rYoSdNfWDtSj40xEJ5fDz3SrHPL
4Lztv1+PYZnjrQoCqrfvbGzQge17WZ+VlgbSA1OHTjggeu7dldsdvqRXt43zd93L
4hSGvspgCRNYfmwSGVRT44O7e8no4NLhQv+nG8bzAgyWA9RoxQIDAQABo4ICIjCC
Ah4wHwYDVR0jBBgwFoAUS776doQjRAS5zr4xb+n1Mgb/DFcwHQYDVR0OBBYEFJZo
XoLpnnNQ6/3YThD7uFWh32W+MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA
MBMGA1UdJQQMMAoGCCsGAQUFBwMBMBMGA1UdIAQMMAowCAYGZ4EMAQIBMG4GCCsG
AQUFBwEBBGIwYDA5BggrBgEFBQcwAoYtaHR0cDovL2NydC5zZWN0aWdvLmNvbS9a
ZXJvU1NMUlNBRFZTU0xDQTIuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5z
ZWN0aWdvLmNvbTCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ANdtfRDRp/V3wsfp
X9cAv/mCyTNaZeHQswFzF8DIxWl3AAABnqYMI3MAAAQDAEgwRgIhANzaqtd4W3I0
DNB0b0a1oFgQUTZK/v3XdimFvztMXLK2AiEAgbZOl/xAHC8g0qvAezhw7Zf+s+iT
fyCVxSc8jzwdauoAdgDIo8R/x7OtuTVrAT9qehJt4zpOQ6XGRvmXrTl1mR3PmgAA
AZ6mDCM3AAAEAwBHMEUCIQCm+xmeJv3cULECtaRIivIw0Di4l/rg6YawsEhE04Ki
MAIgJtWhQjnqnRyob9sNBXB45+xzWgHR5dOaHmUwRnLi+b8wGwYDVR0RBBQwEoIQ
bWFpbC5ub3ZhLm5ldC5wazANBgkqhkiG9w0BAQsFAAOCAYEARg3NCRGG7oGxpVjA
Qch35OcNlXQvvPLFB0zmwuApSVby207a9SW5KozwE8xO7X5Pq1oLr1dd0p02VLNm
9ba+6SIQTppne+wJoH6gUIy1Dg+joLmQTV0GJVJr9SS7Vx+xjaBctwkwV+cmqb41
MTrj4jXvkqQd1D35NvZwg+lRfPYbO74ya9vpgcQP3/sD86sUQq+3c0UdIv3YYtqL
dPUkSQ3KkqiI73anUWCwBcf0gXYkj0+KD5TF4vDaVPferpxZEtwIOaF6it+4KA2I
HnKVb+5hJu7BLNi6ddr0fMmIDpIfBKIvau5eB8mO05czD3EHzOgQh0IK/8c3Bz+1
sObythuDULTs6L067iv5wlYyhDjDQD+Gd3M6DXnxGPUww7s2MxoYKrin7Ac3x5Rf
EafL7Pj7qdgjlYcq6nfHaIU0UehfLGFk4Lcr+FfasM47rbplpdWQVtgcanaUvRui
tTLgK9qyKAOAHYGEeLo70TqI76w5Ojq4xc7MDF3tb85+q9Ec
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-22T21:13:47+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL RSA DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3288
Serial (hex)
D0A908255F8E50E5F3396D1114702A37
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EC:9D:6B:CA:B9:81:8B:7D:D5:9E:D6:1D:A2:3A:65:8A:96:A9:C4:E9:50:ED:EE:0D:2D:A9:3E:7C:F2:17:47:80
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
4B:BE:FA:76:84:23:44:04:B9:CE:BE:31:6F:E9:F5:32:06:FF:0C:57
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2021-03-22T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
831
Serial (hex)
E37CA2E9701E339C2F3FB0ED360FF90A
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CE:75:58:0B:C6:79:6D:3B:3E:A2:C3:E7:42:59:D0:D4:03:07:24:08:E9:60:C7:71:39:C2:FB:5A:3D:94:19:E4
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →