DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mx.aknet.kg · 212.112.96.7:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=mailbox.wificity.kg
Issuer
C=US O=Let's Encrypt CN=E7
Valid from
2026-04-22T01:55:31+00:00
Expires
2026-07-21T01:55:30+00:00
Days remaining
-112
Serial (hex)
06A0037ED2045A74901426119B349ADCCBAE
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:mailbox.wificity.kg

SHA-256 fingerprint

41:AD:8C:D9:3B:C5:4B:E0:6A:75:F4:92:7C:D2:B1:CA:96:B7:FC:C0:A6:4B:B5:CC:25:15:BF:E0:08:2B:A1:7D
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
93:42:72:6F:B1:AA:EE:74:43:F1:01:5E:B5:7C:48:E2:71:65:23:11
authorityKeyIdentifier
AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80
authorityInfoAccess
CA Issuers - URI:http://e7.i.lencr.org/
subjectAltName
DNS:mailbox.wificity.kg
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://e7.c.lencr.org/47.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Apr 22 02:54:01.578 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F2:6A:AA:3D:85:B8:A2:3B:CE:9A:48: FC:C7:42:85:DE:57:3F:45:A3:B7:3F:7C:0D:D2:BC:7D: B1:26:79:94:E7:02:21:00:93:2F:75:7C:96:F5:A5:2A: 57:F6:E7:E8:8A:FE:37:70:20:AB:5B:54:4D:39:DD:0D: D4:57:4F:B9:AE:A9:FA:35 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:8B:9D:6B:0F:FE:BF:81:B4:79:39:C6:D2:31:0A:86: D6:D1:02:D4:F0:46:E2:18:2C:9D:E3:5F:5E:26:25:EF Timestamp : Apr 22 02:54:01.700 2026 GMT Extensions: 00:00:05:00:0B:14:2F:AD Signature : ecdsa-with-SHA256 30:46:02:21:00:89:16:AA:8A:5C:0D:01:5E:4E:94:FA: 6A:E5:5B:25:A7:63:3F:70:9A:49:49:26:F7:B3:65:15: 54:E6:E3:C2:C3:02:21:00:B9:4A:47:44:9C:CD:E3:40: B4:8E:51:08:B4:E2:56:68:FB:03:C4:B7:FA:C4:D8:C8: B6:65:B3:CC:4F:43:C0:7E
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-09T21:01:05+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=E7
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
123
Serial (hex)
AA75F1E62B8F0A220966D38BBFD4BAA1
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

AE:B1:FD:74:10:E8:3B:C9:6F:5D:A3:C6:A7:C2:C1:BB:83:6D:1F:A5:CB:86:E7:08:51:58:90:E4:28:A8:77:0B
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →