DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mx2.mailsentinel.net · 111.90.133.124:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.mailsentinel.net
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Valid from
2026-06-29T00:00:00+00:00
Expires
2027-01-13T23:59:59+00:00
Days remaining
81
Serial (hex)
960709C4F315562CEEB89C38352FEB47
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.mailsentinel.net, DNS:mailsentinel.net

SHA-256 fingerprint

59:8A:C8:66:09:CB:04:F5:E8:BE:4C:A3:03:57:68:C1:CA:62:CE:82:78:41:3E:77:F0:C7:6F:1A:17:31:81:7E
Certificate extensions & PEM
authorityKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
subjectKeyIdentifier
57:63:5B:6E:8E:78:F5:65:61:03:05:3D:B8:99:72:03:FF:76:84:EB
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.mailsentinel.net, DNS:mailsentinel.net
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jun 29 04:42:33.990 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B9:E5:EE:2D:13:F3:64:5F:35:59:5A: 58:1A:CA:24:84:74:47:97:96:35:1B:A7:41:9A:72:1A: 78:28:D3:2B:58:02:21:00:DD:2B:61:F1:19:50:B8:C3: 9B:9A:41:06:35:C0:A6:A7:3A:F4:D5:87:A4:AD:FB:09: 1D:D0:EF:B8:8F:83:B0:82 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jun 29 04:42:34.566 2026 GMT Extensions: 00:00:05:00:04:BF:61:8D Signature : ecdsa-with-SHA256 30:44:02:20:7F:A2:28:48:CE:4C:0D:33:6B:BB:70:84: AF:BE:9E:91:2A:64:F4:84:B8:07:2C:9B:4D:3D:76:9F: 8A:83:A7:71:02:20:74:5D:75:46:F4:86:7E:0B:87:17: EC:89:F3:5D:A6:2F:F0:84:F3:53:2E:B2:52:35:4A:65: A4:6A:49:04:35:ED Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jun 29 04:42:34.031 2026 GMT Extensions: 00:00:05:00:00:41:AD:F9 Signature : ecdsa-with-SHA256 30:46:02:21:00:85:44:72:60:D9:86:FC:CD:AC:0A:CD: 34:75:88:08:35:50:FA:EC:C4:69:80:C0:0C:64:5D:20: A8:F8:6E:9F:E7:02:21:00:FB:AD:3C:49:41:CE:88:A1: 7D:51:05:C3:1F:22:E9:8C:86:35:E0:98:D1:BE:46:53: 40:1A:79:66:C8:0C:C0:19
-----BEGIN CERTIFICATE-----
MIIGoTCCBQmgAwIBAgIRAJYHCcTzFVYs7ricODUv60cwDQYJKoZIhvcNAQELBQAw
YDELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIENBIERWIFIz
NjAeFw0yNjA2MjkwMDAwMDBaFw0yNzAxMTMyMzU5NTlaMB0xGzAZBgNVBAMMEiou
bWFpbHNlbnRpbmVsLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANOVUHVzqdSbvjQVRwwgNrWIK5Y7Kv02UTmhms+v420O0+e3RvDgSZ2YWw5SHzHb
b0mvTbKEI52KAGXb3eDb5670sjOTfxqPYqE4UCEGU3QgF9briwEugemQDy92wHrk
DzobkuSTApQrM0zUxF9VIYnzHa6zZTkWafhNVdjEifeV+v6VBn5u/hq7m8ebAp1h
MBa+l0NHEjo3ozi2XKwQnA9IwvEAKREVp0imGoCTelyqvlhe/9mMZRT4pNY2Bt2P
/ky9XbWRb1bcpC59ET4PW/9Yjv/GjONJNVINd5nqZRFyTUeJ+S7N6fOWn/IkqHlD
o8MgUhsPTEXfEWcz0fyJzHUCAwEAAaOCAxcwggMTMB8GA1UdIwQYMBaAFGjAEhYY
Dq/O9oemMlejRlFdywcnMB0GA1UdDgQWBBRXY1tujnj1ZWEDBT24mXID/3aE6zAO
BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUF
BwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUF
BwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0
aWdvUHVibGljU2VydmVyQXV0aGVudGljYXRpb25DQURWUjM2LmNydDAjBggrBgEF
BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wLwYDVR0RBCgwJoISKi5tYWls
c2VudGluZWwubmV0ghBtYWlsc2VudGluZWwubmV0MIIBjwYKKwYBBAHWeQIEAgSC
AX8EggF7AXkAdwAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9ZnwAAAZ8R
r66GAAAEAwBIMEYCIQC55e4tE/NkXzVZWlgayiSEdEeXljUbp0Gachp4KNMrWAIh
AN0rYfEZULjDm5pBBjXApqc69NWHpK37CR3Q77iPg7CCAH0AjspHC6zeavOiBrCk
eoS3Rv4fxr+VPiXmm07kAkjzxugAAAGfEa+wxgAIAAAFAAS/YY0EAwBGMEQCIH+i
KEjOTA0za7twhK++npEqZPSEuAcsm009dp+Kg6dxAiB0XXVG9IZ+C4cX7InzXaYv
8ITzUy6yUjVKZaRqSQQ17QB/AFlubDOGlLJZcqJWyKDo3ZBKdugIPdqHOwEIOCgU
PO5ZAAABnxGvrq8ACAAABQAAQa35BAMASDBGAiEAhURyYNmG/M2sCs00dYgINVD6
7MRpgMAMZF0gqPhun+cCIQD7rTxJQc6IoX1RBcMfIumMhjXgmNG+RlNAGnlmyAzA
GTANBgkqhkiG9w0BAQsFAAOCAYEAULGMQiLMIA3rfWNjitQBhLoXjvPIMXtK8uJH
KEsqhr7u/oNvVzdkNLQTTRSDhqhJSNltj6IwKyIcFz0SR18YeiMACn8MPwlswRM5
7TAX5l8qWuhzJ8t7IrHsWmJcAHTcfv7d0yh9wTctg1jv0bLHGgih1bjHfDsEdEoJ
y/HOPiMtChtfJ4z+nh7Iped2BIc6QS8so86l2+TG3xP1sfAlu7B4AH964au9zm06
KeMqs94tkovJJxZRmkM+S5ZKKQv/fVkDWQhlVrZOIsc4zLYbtYDywlJ8zbd1dCil
CR5Y3u815QopMKbNfWmkxnzMJHT/9S88lPiH02r+55NcjQFPSEJhBZdXExnDjFKR
srPP6wZbkomsYj3kif3WdbEZhlVe2zjycAOm1f4VptoDhoKgTcQiVFlaoPCUEjWb
TzrQGamllWdg8rd2OgFSPkJuEcAuJb4+vlhAuQJQdfAiUxr8HYlicCPNvXbTxzYX
gpjLy7MfQP8gf/SUoBuiCxjXzh2X
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-24T07:04:53+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3436
Serial (hex)
397A66CC2756362E0DAA87CA6EABE3B1
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4104
Serial (hex)
01FD6D30FCA3CA51A81BBC640E35032D
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
Certificate extensions & PEM
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →