THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mx.tld.pl · 94.152.2.25:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`*.kei.pl' did not match expected CN=`mx.tld.pl'

Certificate verification failed

Subject
CN=*.kei.pl
Issuer
C=PL O=Asseco Data Systems S.A. CN=Certum DV TLS G2 R39 CA
Valid from
2026-05-07T13:22:51+00:00
Expires
2026-11-22T13:22:50+00:00
Days remaining
48
Serial (hex)
67671F10C8FB6FAD7666496D0954E518
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.kei.pl, DNS:kei.pl

SHA-256 fingerprint

C8:02:F1:E8:C3:08:18:63:FC:0A:F4:16:22:66:75:DA:9F:E2:CA:17:80:FE:CB:F5:4D:4E:30:E3:0A:5C:23:68
Certificate extensions & PEM
basicConstraints
CA:FALSE
crlDistributionPoints
Full Name: URI:http://certumdvtlsg2r39ca.crl.certum.pl/certumdvtlsg2r39ca.crl
authorityInfoAccess
OCSP - URI:http://certumdvtlsg2r39ca.ocsp-certum.com CA Issuers - URI:http://certumdvtlsg2r39ca.repository.certum.pl/certumdvtlsg2r39ca.cer
authorityKeyIdentifier
33:A8:77:B7:01:38:6F:5F:1F:24:24:A2:1E:6C:14:E3:6E:22:03:DF
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.2.616.1.113527.2.101.1
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
keyUsage
Digital Signature, Key Encipherment
subjectAltName
DNS:*.kei.pl, DNS:kei.pl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : May 7 13:22:51.642 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5B:A6:C0:12:35:E1:A5:63:E5:F7:9E:73: 5F:86:71:AC:42:7A:63:EA:75:2D:21:DE:3F:9C:A7:EC: 66:E3:08:C1:02:20:5E:0B:E7:EC:03:BE:B9:50:D3:2D: EE:ED:7F:71:D5:1B:73:3C:F5:48:29:12:98:B2:DB:01: 85:A0:2C:CB:9F:1F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : May 7 13:22:51.685 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E3:B2:4A:59:DD:D5:87:A7:AB:F5:96: 34:BA:52:03:12:05:E7:C7:FD:C7:00:4B:9B:74:B1:A6: EF:98:DB:BA:6B:02:20:63:7C:6D:37:02:88:5D:CE:CE: 55:BB:FA:9C:5B:68:B9:B0:0D:7D:D0:2A:89:30:71:A6: 36:43:56:C1:02:32:80 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : May 7 13:22:51.653 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:63:FF:41:06:29:39:87:9B:CC:7B:B7:77: 38:29:22:7F:FB:4C:2D:C4:15:F7:E6:EF:57:B4:92:B5: 7F:DE:75:7D:02:21:00:93:24:A8:B3:F6:0A:6B:1A:03: 56:4F:33:11:F6:EF:CB:D4:B4:E0:06:25:07:96:01:9E: B6:E4:47:D5:5A:86:D8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-04T19:48:24+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=PL O=Asseco Data Systems S.A. CN=Certum DV TLS G2 R39 CA
Issuer
C=PL O=Asseco Data Systems S.A. OU=Certum Certification Authority CN=Certum Trusted Root CA
Valid from
2024-06-18T07:41:22+00:00
Expires
2039-06-05T07:41:22+00:00
Days remaining
4626
Serial (hex)
A82DD9E5DCAFDF13205E70043E6B95A8
Signature
RSA-SHA512
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

83:C0:A5:A7:68:44:C8:40:DF:AF:82:0F:FD:02:AD:F6:57:3A:26:82:3E:F6:AF:75:8A:33:84:A0:AC:04:40:83
Certificate extensions & PEM
authorityInfoAccess
CA Issuers - URI:http://subca.repository.certum.pl/ctrca.cer OCSP - URI:http://subca.ocsp-certum.com
authorityKeyIdentifier
8C:FB:1C:75:BC:02:D3:9F:4E:2E:48:D9:F9:60:54:AA:C4:B3:4F:FA
basicConstraints
CA:TRUE, pathlen:0
crlDistributionPoints
Full Name: URI:http://subca.crl.certum.pl/ctrca.crl
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
keyUsage
Certificate Sign, CRL Sign
certificatePolicies
Policy: X509v3 Any Policy
subjectKeyIdentifier
33:A8:77:B7:01:38:6F:5F:1F:24:24:A2:1E:6C:14:E3:6E:22:03:DF
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=PL O=Asseco Data Systems S.A. OU=Certum Certification Authority CN=Certum Trusted Root CA
Issuer
C=PL O=Asseco Data Systems S.A. OU=Certum Certification Authority CN=Certum Trusted Root CA
Valid from
2018-03-16T12:10:13+00:00
Expires
2043-03-16T12:10:13+00:00
Days remaining
6006
Serial (hex)
1EBF5950B8C980374C06F7EB554FB5ED
Signature
RSA-SHA512
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FE:76:96:57:38:55:77:3E:37:A9:5E:7A:D4:D9:CC:96:C3:01:57:C1:5D:31:76:5B:A9:B1:57:04:E1:AE:78:FD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
8C:FB:1C:75:BC:02:D3:9F:4E:2E:48:D9:F9:60:54:AA:C4:B3:4F:FA
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →