DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mail1.idwebhost.com · 202.52.146.196:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=mail1.idwebhost.com
Issuer
C=US O=Let's Encrypt CN=R12
Valid from
2025-12-22T21:52:15+00:00
Expires
2026-03-22T21:52:14+00:00
Days remaining
-213
Serial (hex)
06489F4809C15265B2B2813E6DDABEF06AEF
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail1.idwebhost.com

SHA-256 fingerprint

48:95:49:F3:2C:38:ED:DB:4E:32:57:92:33:2C:62:3D:B1:E6:37:A6:28:67:7D:5E:21:34:E1:87:5E:84:9F:45
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
41:50:E6:CE:1D:4A:22:11:00:E0:36:8B:60:5D:DB:6D:D2:8A:E3:40
authorityKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityInfoAccess
CA Issuers - URI:http://r12.i.lencr.org/
subjectAltName
DNS:mail1.idwebhost.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r12.c.lencr.org/112.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Dec 22 22:50:45.489 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:01:36:CB:92:85:3C:56:FC:0D:A3:44:9E: 9A:CA:D3:C5:36:A5:83:C0:4F:A5:04:B0:E5:15:90:71: 3B:AF:B8:30:02:21:00:96:45:5F:7C:30:B8:86:6C:24: FA:30:26:00:7C:99:B1:30:95:8C:E4:59:A0:D7:05:BB: 10:60:6E:8F:93:DD:AC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85: F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8 Timestamp : Dec 22 22:50:45.524 2025 GMT Extensions: 00:00:05:00:2C:EF:34:B6 Signature : ecdsa-with-SHA256 30:45:02:20:5C:3D:86:31:F4:EF:03:09:7E:8A:1F:81: 4B:57:AB:AF:91:D2:EF:FE:87:EE:5B:8B:C0:A0:C4:AF: E9:1B:75:41:02:21:00:E8:D7:1C:4A:57:69:E0:6D:AB: 2E:14:27:15:41:35:4B:13:7E:D9:29:5B:0B:18:CA:21: 79:8F:2C:39:67:C9:5E
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-10-21T18:57:32+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R12
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
142
Serial (hex)
C212324B70A9B49171DC40F7E285263C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:1F:CE:77:84:01:68:99:A5:A0:02:03:A9:EF:C8:0F:18:EB:BD:75:58:07:17:ED:C1:55:35:80:93:08:36:EC
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →