DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.telkom.net.id · 103.147.5.14:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=webmail.telkom.net.id
Issuer
C=US O=Let's Encrypt CN=R12
Valid from
2026-05-12T10:20:20+00:00
Expires
2026-08-10T10:20:19+00:00
Days remaining
-82
Serial (hex)
05682E09999953A07416F05464EA563CF8ED
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail.telkom.net.id, DNS:webmail.telkom.net.id

SHA-256 fingerprint

F1:1D:3E:F8:79:D6:CE:26:32:63:ED:F8:8A:11:68:07:79:53:F1:B8:3C:10:C7:A8:FE:70:23:68:0B:41:5B:DA
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
12:84:4D:F1:BF:A4:A3:1D:37:15:94:38:96:23:39:FE:02:19:67:92
authorityKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityInfoAccess
CA Issuers - URI:http://r12.i.lencr.org/
subjectAltName
DNS:mail.telkom.net.id, DNS:webmail.telkom.net.id
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r12.c.lencr.org/110.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:8B:9D:6B:0F:FE:BF:81:B4:79:39:C6:D2:31:0A:86: D6:D1:02:D4:F0:46:E2:18:2C:9D:E3:5F:5E:26:25:EF Timestamp : May 12 11:18:51.701 2026 GMT Extensions: 00:00:05:00:11:D9:DB:74 Signature : ecdsa-with-SHA256 30:44:02:20:47:3B:8C:DD:B1:44:14:DB:35:4C:8D:05: 98:8D:4F:5C:8A:6E:08:97:BB:2E:3B:B5:64:2A:35:1C: EA:02:60:44:02:20:51:3F:C1:DD:24:57:7F:05:51:E9: EA:05:3E:B7:EF:9E:C2:6C:F8:0F:71:58:A3:2D:DE:F0: 65:FD:5D:D2:C3:D4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : May 12 11:18:50.761 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:43:8B:DA:76:F2:CB:42:72:42:C6:29:53: 18:78:FF:7B:6A:46:5A:22:0B:6A:34:CF:C7:6A:76:2E: 1B:2B:12:73:02:21:00:CA:96:14:EC:B0:E9:96:B9:A1: B7:9E:33:34:E1:C8:00:CD:16:5E:A2:99:0C:62:5D:54: 02:B8:A0:E6:CA:13:1B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-30T23:46:31+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R12
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
133
Serial (hex)
C212324B70A9B49171DC40F7E285263C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:1F:CE:77:84:01:68:99:A5:A0:02:03:A9:EF:C8:0F:18:EB:BD:75:58:07:17:ED:C1:55:35:80:93:08:36:EC
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →