DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mfa-inc.com · 192.124.249.75:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=mfa-inc.com
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Valid from
2026-10-15T15:03:55+00:00
Expires
2027-01-13T15:03:55+00:00
Days remaining
85
Serial (hex)
AFE89B0F4E2C04D6
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.mfa-inc.com, DNS:mfa-inc.com

SHA-256 fingerprint

C2:21:F8:28:5E:21:7B:2B:1F:69:2B:C3:35:8F:D6:B1:4C:70:8B:6D:91:1E:2E:57:7A:0E:8A:BC:F6:49:D8:32
Certificate extensions & PEM
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
keyUsage
Digital Signature, Key Encipherment
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfr1v1dv_s1-1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.16.840.1.114414.1.7.23.1 CPS: http://certificates.starfieldtech.com/repository/
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_issuing_dv-r1v1.crt OCSP - URI:http://ocsp.starfieldtech.com/
authorityKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
subjectAltName
DNS:www.mfa-inc.com, DNS:mfa-inc.com
subjectKeyIdentifier
C3:A3:7A:18:26:F1:D7:D9:41:4C:6C:15:3F:48:2C:0E:68:4F:95:9D
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Oct 15 15:03:56.217 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:32:74:07:28:78:D2:2F:98:9C:88:54:2E: 44:0C:94:1E:71:2A:A7:C1:3A:A8:4A:EF:24:43:6C:36: 17:0B:79:FA:02:20:1D:BB:03:CF:8B:31:7F:75:59:7D: 32:94:31:41:82:28:55:AE:83:C1:22:04:D3:06:CE:A3: 19:81:86:C3:9E:DA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Oct 15 15:03:56.813 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C8:E0:73:92:3C:B3:AB:1C:23:50:A9: E8:3D:7D:68:6D:21:F7:C8:33:BB:0B:FE:FD:8F:73:28: A0:48:4D:CC:50:02:20:2E:8A:4E:46:D5:0D:57:AE:05: 93:FE:C1:6C:C9:29:26:6C:A0:91:6D:EB:94:21:82:71: 37:FA:A5:36:43:69:61 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Oct 15 15:03:57.134 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:77:A6:64:C4:69:0D:56:10:5D:E1:95:DF: 09:39:BB:D9:EA:1E:44:E0:94:96:67:87:52:6C:1D:EE: 09:24:DB:ED:02:21:00:DE:20:8A:8C:DF:C8:53:14:0E: C4:38:D6:8B:22:10:55:A8:6B:0F:2B:63:2F:8B:6A:95: 05:A6:35:76:ED:D2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-20T11:54:48+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Valid from
2025-08-27T12:00:00+00:00
Expires
2040-08-23T11:59:59+00:00
Days remaining
5056
Serial (hex)
C5E225A10DF67804EC5305DCF38E5234
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

06:89:1C:34:A2:E4:68:7C:63:0B:29:85:0C:C9:F6:D4:5D:ED:39:49:1C:F8:77:C7:24:6B:6E:C6:33:58:7A:2C
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
authorityKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_root-r1.crt
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sf_tls_root-r1.crl 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2025-09-24T12:00:00+00:00
Expires
2037-12-31T23:59:59+00:00
Days remaining
4090
Serial (hex)
466702AA31941FA2C196EFE6D09BAF6C
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

26:A9:3D:60:03:90:77:65:4C:0D:DA:1F:B6:34:AF:5F:F5:C1:14:C7:AC:1F:D0:44:9B:1C:9D:21:78:B0:28:FF
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE
subjectKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →