DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mail.pregi.net · 202.90.128.2:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=mail.phopenix.net
Issuer
C=US O=Let's Encrypt CN=Let's Encrypt Authority X3
Valid from
2019-03-06T15:06:33+00:00
Expires
2019-06-04T15:06:33+00:00
Days remaining
-2679
Serial (hex)
038BD404A32F95539B168DFFCBE51041CB70
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail.phopenix.net, DNS:mail.pregi.net

SHA-256 fingerprint

22:78:71:E3:70:6B:C6:1F:4D:65:FF:B1:8C:F1:CA:D8:9F:C4:88:A8:3B:5E:DE:EC:5A:01:9F:37:23:9D:00:F1
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
53:57:BC:D6:BB:BC:F9:D5:1E:BF:78:0C:3C:F1:B3:26:55:26:33:93
authorityKeyIdentifier
A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
authorityInfoAccess
OCSP - URI:http://ocsp.int-x3.letsencrypt.org CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
subjectAltName
DNS:mail.phopenix.net, DNS:mail.pregi.net
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.letsencrypt.org
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 29:3C:51:96:54:C8:39:65:BA:AA:50:FC:58:07:D4:B7: 6F:BF:58:7A:29:72:DC:A4:C3:0C:F4:E5:45:47:F4:78 Timestamp : Mar 6 16:06:34.017 2019 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7C:20:46:0B:01:36:E8:61:E7:78:7B:89: 6D:E0:DF:D6:0E:B3:16:1B:40:A2:E4:29:30:80:F6:F6: 11:63:24:65:02:20:12:CE:F6:D6:5A:F8:05:9D:3D:65: 3E:7D:B7:C3:B9:D1:FB:8D:79:FD:49:B7:72:D4:EF:6D: 0F:8D:0E:E4:1F:90 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 74:7E:DA:83:31:AD:33:10:91:21:9C:CE:25:4F:42:70: C2:BF:FD:5E:42:20:08:C6:37:35:79:E6:10:7B:CC:56 Timestamp : Mar 6 16:06:34.439 2019 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:71:DC:0C:73:B3:6E:FC:3C:1D:FA:BB:3C: A1:E1:01:E6:8C:78:B9:06:93:5F:D6:DB:7D:EE:00:A2: A8:E2:A9:EE:02:20:38:45:21:02:3A:37:21:28:88:61: 3D:83:C2:F8:56:98:1B:A4:AE:DE:70:7D:09:7C:65:B7: F5:9A:D5:53:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-03T23:15:14+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=Let's Encrypt Authority X3
Issuer
O=Digital Signature Trust Co. CN=DST Root CA X3
Valid from
2016-03-17T16:40:46+00:00
Expires
2021-03-17T16:40:46+00:00
Days remaining
-2027
Serial (hex)
0A0141420000015385736A0B85ECA708
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

25:84:7D:66:8E:B4:F0:4F:DD:40:B1:2B:6B:07:40:C5:67:DA:7D:02:43:08:EB:6C:2C:96:FE:41:D9:DE:21:8D
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://isrg.trustid.ocsp.identrust.com CA Issuers - URI:http://apps.identrust.com/roots/dstrootcax3.p7c
authorityKeyIdentifier
C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.root-x1.letsencrypt.org
crlDistributionPoints
Full Name: URI:http://crl.identrust.com/DSTROOTCAX3CRL.crl
subjectKeyIdentifier
A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →