DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mx.ocsnet.net · 64.18.241.47:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=mail.oacys.com
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2025-10-09T00:00:00+00:00
Expires
2026-11-09T23:59:59+00:00
Days remaining
37
Serial (hex)
A904A1CCCB8436716C6D03E49C6A2E4E
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:mail.oacys.com, DNS:mail.ocsnet.net, DNS:mx.ocsnet.net, DNS:smtp.oacys.com, DNS:smtp.ocsnet.net, DNS:webmail.ocsnet.net

SHA-256 fingerprint

05:7E:F4:78:01:7E:A0:65:1E:1F:DF:6D:85:81:AF:87:BB:B7:B1:DB:30:A1:94:D7:3C:29:DD:5D:7B:5C:5F:7D
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
A3:13:98:35:77:3B:F3:01:64:AC:86:C8:4C:7F:83:AC:CE:01:00:CE
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Oct 9 20:57:43.860 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E2:93:D7:F7:9B:D4:9B:75:75:B1:C1: E8:5E:73:4D:6F:AA:C4:55:53:B1:BC:4D:94:F9:A6:9B: 62:43:EF:D8:CF:02:21:00:C3:DA:9D:5B:8C:A7:1E:3B: 7C:3E:12:E1:BE:F3:4E:FC:38:F5:AB:D9:32:DB:60:E0: D6:34:B9:25:09:78:DF:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Oct 9 20:57:44.025 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:AB:8F:F5:D3:D0:BB:26:7F:1D:F0:36: 88:D5:1C:16:32:1B:BD:DC:F2:65:0E:85:97:13:2F:D5: B3:57:82:AC:03:02:20:2C:9E:4D:B4:2C:92:D6:EF:71: A6:E8:30:02:1E:07:76:EB:C7:9F:2C:0A:D5:C8:80:10: F0:49:D0:21:2B:FF:5F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Oct 9 20:57:43.827 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:0D:C5:90:49:D8:C8:26:B7:CA:F3: 65:3D:DE:9C:9A:9F:00:F9:26:4B:16:09:D8:75:E9:A3: 64:AB:FE:88:39:02:21:00:F0:F2:2F:83:29:B0:2D:D9: CD:71:2F:9A:79:4B:E7:93:45:43:62:8B:D9:FF:B6:A5: F1:B1:4C:16:7F:BC:99:D0
subjectAltName
DNS:mail.oacys.com, DNS:mail.ocsnet.net, DNS:mx.ocsnet.net, DNS:smtp.oacys.com, DNS:smtp.ocsnet.net, DNS:webmail.ocsnet.net
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-03T05:38:12+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1550
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →