THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mail138.netdesignhost.com · 150.95.20.138:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.netdesignhost.com
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Valid from
2026-01-07T04:40:37+00:00
Expires
2027-02-08T04:40:36+00:00
Days remaining
117
Serial (hex)
1577EABBD0BE3D6F7E8AB097
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.netdesignhost.com, DNS:netdesignhost.com

SHA-256 fingerprint

C7:02:B1:E7:05:B2:D3:2F:CE:FB:1A:29:4B:1D:2D:77:3A:E5:4F:F0:50:8A:1B:31:85:81:14:B5:FA:4B:40:39
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr6alphasslca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr6alphasslca2025
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr6alphasslca2025.crl
subjectAltName
DNS:*.netdesignhost.com, DNS:netdesignhost.com
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
subjectKeyIdentifier
57:A8:64:78:11:EB:99:1D:90:DD:F6:11:15:BA:3E:23:3F:3E:B2:21
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 7 04:40:41.771 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A1:7F:6D:D4:FD:97:9C:2B:80:59:50: EA:83:B4:B8:95:E0:2D:EF:48:07:97:54:08:58:AF:49: 6A:96:0C:3D:1E:02:20:76:C3:7C:D7:BE:FC:E6:91:2D: 8E:2B:93:57:A4:02:CC:CC:7C:1F:29:B8:CA:E0:B1:DD: 88:03:DE:37:FB:6F:56 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 7 04:40:41.051 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:96:99:CA:38:3D:B1:DF:F7:96:67:31: D3:DF:BC:8B:75:6D:1E:44:74:D9:37:C8:BF:13:E7:3D: BD:AF:B0:B9:B3:02:20:1E:02:42:10:8E:46:B2:99:7C: 90:56:34:4D:62:D6:B4:32:89:D3:69:2D:6E:4A:63:D8: 34:1C:C9:DF:BD:73:25 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 7 04:40:41.330 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:94:8D:FD:BD:99:4B:59:8D:A9:09:2A: 3D:B6:36:65:FB:4C:F4:43:B4:2D:C9:41:7B:C8:5D:0E: 66:6F:EF:3F:F6:02:20:33:5B:49:05:E6:17:1E:03:62: 82:2B:8D:C0:8A:D5:CF:68:8D:98:8F:76:97:C2:92:65: BD:39:F2:C0:3D:AB:5D
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-13T05:48:46+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2025-05-21T02:36:52+00:00
Expires
2027-05-21T00:00:00+00:00
Days remaining
219
Serial (hex)
837D4EB89E912FE72CAD3BC7692DDC20
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A8:83:55:92:31:F8:38:8D:AF:35:CE:41:C8:10:10:40:AE:8F:D9:B6:56:43:42:47:B9:47:5A:F5:92:CC:08:CA
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr6 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r6.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r6.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2019-06-19T00:00:00+00:00
Expires
2028-01-28T12:00:00+00:00
Days remaining
472
Serial (hex)
751E3F5649E74CBBF69D0026B67CAA8C
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C8:4E:13:78:B9:74:A9:91:AC:DC:DD:73:34:21:E3:06:1E:6F:A2:1A:04:91:C8:90:2B:AF:DE:38:55:E0:06:3E
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →