DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mail.sfn.cn · 101.71.145.49:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=北京 L=北京 O=北京国科云计算技术有限公司 CN=*.sfn.cn
Issuer
C=CN O=China Financial Certification Authority CN=CFCA OV OCA
Valid from
2026-03-12T03:05:40+00:00
Expires
2027-04-10T03:05:39+00:00
Days remaining
151
Serial (hex)
2015012C81542E950450860206327877
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.sfn.cn, DNS:sfn.cn

SHA-256 fingerprint

63:89:24:D4:06:62:4C:94:48:2B:1C:24:8A:9F:D7:65:0D:64:E6:0E:5E:37:58:14:69:4F:D0:DC:E6:63:7D:9C
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityInfoAccess
OCSP - URI:http://ocsp.cfca.com.cn/ocsp CA Issuers - URI:http://gtc.cfca.com.cn/ovoca/ovoca.cer
subjectAltName
DNS:*.sfn.cn, DNS:sfn.cn
keyUsage
Digital Signature, Key Encipherment
subjectKeyIdentifier
71:52:61:A6:F4:0F:86:F6:BE:9B:06:57:DB:C4:63:F2:20:43:C4:D2
extendedKeyUsage
TLS Web Server Authentication
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Mar 12 03:05:41.920 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FD:47:E3:F2:02:BF:E1:01:5F:C1:1B: D0:C6:A6:78:91:D6:45:3C:EC:D4:F6:52:F8:E5:E3:0B: 48:52:54:B9:AD:02:20:41:0B:5B:98:0D:87:23:61:75: 18:E1:59:88:4C:8D:CB:39:0F:72:40:4F:20:71:BF:5B: A9:9E:0A:DA:C3:5B:7C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Mar 12 03:05:41.974 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F5:21:9F:55:C6:B0:DF:6B:81:59:8F: B6:39:7F:4D:1D:2E:EE:6D:35:F5:DF:B5:02:9A:FC:D1: 08:B9:67:D6:4A:02:21:00:E6:23:BC:2B:1A:5E:96:98: 83:E8:A8:41:21:E0:98:AE:FF:36:20:E2:70:3C:E6:52: FA:CF:72:7E:48:47:E5:06 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Mar 12 03:05:41.951 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:8D:68:B7:37:21:93:C1:E9:9C:44:0F: 6B:34:44:7B:22:EF:EC:E8:DD:93:63:52:F3:F6:24:05: F9:4A:65:95:8A:02:20:11:1A:D4:BF:96:C2:2F:11:B7: 4E:9C:BC:4D:2D:D6:29:37:E1:7F:59:CA:BE:7D:82:77: 84:FF:D1:9A:B4:14:B5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Mar 12 03:05:42.117 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C1:5C:B1:68:35:DC:A8:40:77:2A:DE: 8B:60:B9:53:9C:7A:43:FF:53:DE:0D:A6:FB:DF:90:EE: 1B:0E:59:7F:46:02:21:00:D6:B8:7E:2C:C3:34:7C:D4: 99:7A:C5:3E:97:62:AA:AF:F5:D1:D9:68:58:77:17:C3: 43:76:80:FC:35:17:C5:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Mar 12 03:05:42.127 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6D:A3:99:0E:E0:64:30:FD:20:05:A6:22: E3:B2:9D:C1:21:16:60:32:55:09:94:68:BD:00:32:5B: 55:28:FB:9F:02:20:3C:2A:DC:63:17:FA:BC:29:C6:73: 6C:C2:C3:29:47:4D:B2:98:83:C8:6B:DA:8E:B0:2D:C5: CB:35:5A:7D:32:17
authorityKeyIdentifier
66:B3:EF:FB:54:95:87:E9:AC:A5:96:56:AE:E6:7D:ED:3A:D0:43:D1
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.cfca.com.cn/us/us-12.htm
crlDistributionPoints
Full Name: URI:http://crl.cfca.com.cn/OVOCA/RSA/allCRL.crl 
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIQIBUBLIFULpUEUIYCBjJ4dzANBgkqhkiG9w0BAQsFADBV
MQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmlj
YXRpb24gQXV0aG9yaXR5MRQwEgYDVQQDDAtDRkNBIE9WIE9DQTAeFw0yNjAzMTIw
MzA1NDBaFw0yNzA0MTAwMzA1MzlaMHQxCzAJBgNVBAYTAkNOMQ8wDQYDVQQIDAbl
jJfkuqwxDzANBgNVBAcMBuWMl+S6rDEwMC4GA1UECgwn5YyX5Lqs5Zu956eR5LqR
6K6h566X5oqA5pyv5pyJ6ZmQ5YWs5Y+4MREwDwYDVQQDDAgqLnNmbi5jbjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM0Tc5L8ZT/pvrqiahX8SsjADHU5
bcOvU1bclZbPNz5fKEFfxGERW4TfIvgpfAnqh2LlRkGBEcyrxNMG1AZZ/bZZGZgh
9INPHmafeAFSg2cKqzs60fIM3HJmLCRk27W0IzFJ2Y4aIHdSfLXKwWxUqaKwUZdv
WwgjUhYMLiX49bPhK/kTIsuiLoJChtY7N/ZW6rZDcUMbuwWpIhujyQcWvFsHkboQ
mRQMaRW63DcSxWjDEHtI/tVj0t70McMF47hCChgfESqvKrfpZuEW8O9A7WoKpUDI
uQT6zpyd8hBDzgPNyb5v4kD+xIx1bhPVVJzhc+FDR4liVb+7WNlTWpoGwBMCAwEA
AaOCA/swggP3MAwGA1UdEwEB/wQCMAAwbAYIKwYBBQUHAQEEYDBeMCgGCCsGAQUF
BzABhhxodHRwOi8vb2NzcC5jZmNhLmNvbS5jbi9vY3NwMDIGCCsGAQUFBzAChiZo
dHRwOi8vZ3RjLmNmY2EuY29tLmNuL292b2NhL292b2NhLmNlcjAbBgNVHREEFDAS
gggqLnNmbi5jboIGc2ZuLmNuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUcVJh
pvQPhva+mwZX28Rj8iBDxNIwEwYDVR0lBAwwCgYIKwYBBQUHAwEwggJvBgorBgEE
AdZ5AgQCBIICXwSCAlsCWQB2ANbVjanQF1Pzakqgx1dJAq/rx9ws04zZ92TIDIkZ
Hp8CAAABnOAB0yAAAAQDAEcwRQIhAP1H4/ICv+EBX8Eb0MameJHWRTzs1PZS+OXj
C0hSVLmtAiBBC1uYDYcjYXUY4VmITI3LOQ9yQE8gcb9bqZ4K2sNbfAB3AEaiOWfG
DbZGh8ZvPfmZlHaTpqYRIIRX1VXn49Ch2bZGAAABnOAB01YAAAQDAEgwRgIhAPUh
n1XGsN9rgVmPtjl/TR0u7m019d+1Apr80Qi5Z9ZKAiEA5iO8KxpelpiD6KhBIeCY
rv82IOJwPOZS+s9yfkhH5QYAdgBEwr0M6RQOZKXJSgGTClqhuzWXDgDuERaJaCoc
RNe1ZgAAAZzgAdM/AAAEAwBHMEUCIQCNaLc3IZPB6ZxED2s0RHsi7+zo3ZNjUvP2
JAX5SmWVigIgERrUv5bCLxG3Tpy8TS3WKTfhf1nKvn2Cd4T/0Zq0FLUAdwAAGl0a
HC2TdbZIVXj4L3Ghrm7vOX0pfIrjFXvK3uGgHgAAAZzgAdPlAAAEAwBIMEYCIQDB
XLFoNdyoQHcq3otguVOcekP/U94NpvvfkO4bDll/RgIhANa4fizDNHzUmXrFPpdi
qq/10dloWHcXw0N2gPw1F8U/AHUATGPcmOWcHauI9h6KPd6uj6tEozd7X5uUw/uh
nPzBviYAAAGc4AHT7wAABAMARjBEAiBto5kO4GQw/SAFpiLjsp3BIRZgMlUJlGi9
ADJbVSj7nwIgPCrcYxf6vCnGc2zCwylHTbKYg8hr2o6wLcXLNVp9MhcwHwYDVR0j
BBgwFoAUZrPv+1SVh+mspZZWruZ97TrQQ9EwRgYDVR0gBD8wPTA7BgZngQwBAgIw
MTAvBggrBgEFBQcCARYjaHR0cDovL3d3dy5jZmNhLmNvbS5jbi91cy91cy0xMi5o
dG0wPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5jZmNhLmNvbS5jbi9PVk9D
QS9SU0EvYWxsQ1JMLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAywIfunYunIMKDrwc
h8wfVZWwxm/kwbJssWAkwvoRVVf6iHcHQsYF1+SuOM61nOomGxlAVl4ZmHLGfE73
XQ/qVtWWyDUYJL/qb6nZ+4u+mwt5UGL0ku4I11piXRzalYcIiTV9MQvF0/93tMeN
/S6oMNo0pwkBZX2sZGBYgmafAR1FZyQcXWGRgatAZbVx1x0l+jarncop9T6N042V
ayGj5YmM02zXPj4Y88MhinXO2kAXvDsVu4gyW7H92JNeu0lX6i+VRiBRTRUfg2ns
SZPT/k8+dLMI2ktEO1Zg+xp7sFsRjaNvcfQ9ekNHsHgqnjuUijWcdweTi8voi8Jt
OPRMig==
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-11-10T02:57:47+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=CN O=China Financial Certification Authority CN=CFCA OV OCA
Issuer
C=CN O=China Financial Certification Authority CN=CFCA EV ROOT
Valid from
2015-03-25T02:02:56+00:00
Expires
2029-12-25T02:02:56+00:00
Days remaining
1140
Serial (hex)
F9DF6ADFF564BEA68B82
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

F0:7B:BB:DE:07:6F:9B:40:C5:7C:C4:BE:FE:DE:97:CA:1F:53:B9:AE:14:7F:03:5D:28:4C:BF:53:F3:43:2F:B8
Certificate extensions & PEM
authorityInfoAccess
OCSP - URI:http://ocsp.cfca.com.cn/ocsp
authorityKeyIdentifier
E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy CPS: http://www.cfca.com.cn/us/us-12.htm
crlDistributionPoints
Full Name: URI:http://crl.cfca.com.cn/evrca/RSA/crl1.crl
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
66:B3:EF:FB:54:95:87:E9:AC:A5:96:56:AE:E6:7D:ED:3A:D0:43:D1
extendedKeyUsage
TLS Web Client Authentication, E-mail Protection, TLS Web Server Authentication
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=CN O=China Financial Certification Authority CN=CFCA EV ROOT
Issuer
C=CN O=China Financial Certification Authority CN=CFCA EV ROOT
Valid from
2012-08-08T03:07:01+00:00
Expires
2029-12-31T03:07:01+00:00
Days remaining
1147
Serial (hex)
184ACCD6
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

5C:C3:D7:8E:4E:1D:5E:45:54:7A:04:E6:87:3E:64:F9:0C:F9:53:6D:1C:CC:2E:F8:00:F3:55:C4:C5:FD:70:FD
Certificate extensions & PEM
authorityKeyIdentifier
E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →