THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.xunta.es · 85.91.64.136:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=ES ST=La Coruña L=Santiago de Compostela O=XUNTA DE GALICIA CN=smtp.edu.xunta.gal
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2026-01-12T16:26:05+00:00
Expires
2027-02-13T16:26:04+00:00
Days remaining
132
Serial (hex)
28B43DA37B02A3D48006CA97
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:smtp.edu.xunta.gal, DNS:smtp.edu.xunta.es, DNS:mail.xunta.es, DNS:mta.xunta.es, DNS:mta.edu.xunta.es, DNS:antispam.xunta.es, DNS:smtp.xustiza.gal, DNS:mta.xunta.gal, DNS:mta.edu.xunta.gal, DNS:antispam.xunta.gal, DNS:mail.xunta.gal

SHA-256 fingerprint

D3:81:46:03:E4:1E:64:1D:82:54:1C:71:AD:FC:6E:31:7E:10:15:13:8E:AA:1F:F6:87:17:B7:0B:82:1B:E4:15
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsrsaovsslca2018.crl
subjectAltName
DNS:smtp.edu.xunta.gal, DNS:smtp.edu.xunta.es, DNS:mail.xunta.es, DNS:mta.xunta.es, DNS:mta.edu.xunta.es, DNS:antispam.xunta.es, DNS:smtp.xustiza.gal, DNS:mta.xunta.gal, DNS:mta.edu.xunta.gal, DNS:antispam.xunta.gal, DNS:mail.xunta.gal
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
82:B8:0C:CF:13:DA:16:BB:86:21:E5:28:C1:88:2D:FA:37:B0:0E:9B
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 12 16:26:09.381 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BA:FA:DF:C1:4A:13:3A:28:BF:00:4D: 1F:CF:87:51:C1:41:36:8C:D3:F9:6A:18:A9:85:58:94: C6:3A:51:6C:8D:02:20:64:8F:71:23:6C:18:C3:18:7B: 5C:14:E4:13:E0:4C:D2:8A:B0:E0:E7:CC:53:BF:04:14: 9F:98:BB:97:7D:E6:4C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 12 16:26:09.371 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:56:0C:D3:72:CF:AF:A3:04:81:92:62:8A: 23:A0:72:35:3D:86:FF:6C:C9:35:4F:89:B7:D7:79:70: 63:C2:26:7B:02:20:3A:EE:6B:03:99:D2:E5:43:6B:C0: BC:47:BF:3A:D4:34:11:DC:2A:97:9A:4B:84:A0:3F:EE: C9:0F:B4:7E:A8:37 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 12 16:26:10.316 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:93:EC:C1:08:E0:7B:BE:E2:8E:9D:D6: 75:2F:1F:6D:E9:73:EC:EA:29:1E:D0:10:CD:7B:4A:33: AE:DB:41:48:93:02:20:25:5F:F7:D0:74:CD:E5:28:9F: 5C:1C:2E:AB:75:CD:1F:B2:63:DA:49:1E:25:F7:F3:85: 2C:BE:18:8D:4E:8C:8A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-04T02:29:29+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
778
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fIh38YjvUMzqFVzANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xODExMjEwMDAwMDBaFw0yODEx
MjEwMDAwMDBaMFAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52
LXNhMSYwJAYDVQQDEx1HbG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdaydUMGCEAI9WXD+uu3Vxoa2uP
UGATeoHLl+6OimGUSyZ59gSnKvuk2la77qCk8HuKf1UfR5NhDW5xUTolJAgvjOH3
idaSz6+zpz8w7bXfIa7+9UQX/dhj2S/TgVprX9NHsKzyqzskeU8fxy7quRU6fBhM
abO1IFkJXinDY+YuRluqlJBJDrnw9UqhCS98NE3QvADFBlV5Bs6i0BDxSEPouVq1
lVW9MdIbPYa+oewNEtssmSStR8JvA+Z6cLVwzM0nLKWMjsIYPJLJLnNvBhBWk0Cq
o8VS++XFBdZpaFwGue5RieGKDkFNm5KQConpFmvv73W+eka440eKHRwup08CAwEA
AaOCASkwggElMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdDgQWBBT473/yzXhnqN5vjySNiPGHAwKz6zAfBgNVHSMEGDAWgBSP8Et/qC5F
JK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAroCmgJ4Yl
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJmQyC1fQorUC2bbmANz
EdSIhlIoU4r7rd/9c446ZwTbw1MUcBQJfMPg+NccmBqixD7b6QDjynCy8SIwIVbb
0615XoFYC20UgDX1b10d65pHBf9ZjQCxQNqQmJYaumxtf4z1s4DfjGRzNpZ5eWl0
6r/4ngGPoJVpjemEuunl1Ig423g7mNA2eymw0lIYkN5SQwCuaifIFJ6GlazhgDEw
fpolu4usBCOmmQDo8dIm7A9+O4orkjgTHY+GzYZSR+Y0fFukAj6KYXwidlNalFMz
hriSqHKvoflShx8xpfywgVcvzfTO3PYkz6fiNJBonf6q8amaEsybwMbDqKWwIX7e
SPY=
-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2009-03-18T10:00:00+00:00
Expires
2029-03-18T10:00:00+00:00
Days remaining
896
Serial (hex)
04000000000121585308A2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3B
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →