DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mx2.net1.bg · 213.91.175.2:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `mx2.net1.bg'

Certificate verification failed

Subject
C=BG L=Sofia O=Vivacom Bulgaria EAD CN=vivacom.bg
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
Valid from
2025-12-15T00:00:00+00:00
Expires
2027-01-15T23:59:59+00:00
Days remaining
92
Serial (hex)
04A4947326BDFFC30BDD14D59AE96961
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:vivacom.bg, DNS:www.vivacom.bg, DNS:*.vivacom.bg, DNS:*.svc.vivacom.bg

SHA-256 fingerprint

EA:D3:6E:9F:9D:F2:B6:5F:54:72:95:C3:18:60:AE:06:E0:98:A2:46:7D:B0:D8:4A:4B:5F:59:19:27:81:A2:1E
Certificate extensions & PEM
authorityKeyIdentifier
A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
subjectKeyIdentifier
AB:BC:3A:EF:D2:AB:34:EE:C0:E6:60:1E:F0:5C:06:F6:3A:35:10:F4
subjectAltName
DNS:vivacom.bg, DNS:www.vivacom.bg, DNS:*.vivacom.bg, DNS:*.svc.vivacom.bg
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Dec 15 07:58:24.036 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BF:4B:BF:C0:BF:6C:5E:30:67:AE:3C: B4:BB:0F:2F:0A:57:04:19:6D:3D:F0:CE:E8:F9:36:69: BB:BE:16:61:90:02:20:19:A9:20:5E:83:23:7D:03:F5: 64:E7:02:2D:32:25:FC:0E:17:31:59:38:4C:87:8C:23: 52:DD:1B:88:F5:CF:87 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Dec 15 07:58:24.025 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CE:34:54:82:F5:7C:FA:7C:17:A7:BF: 40:01:1B:21:A9:64:77:33:A9:29:E5:78:CE:5D:D9:61: EF:82:6F:A8:04:02:20:1B:A8:1B:8E:15:72:CD:7D:BD: F7:CF:1E:0A:CC:C0:F9:0F:B2:FE:48:99:A9:D5:DE:D9: 34:D5:65:A0:27:75:BC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Dec 15 07:58:24.261 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FB:33:E6:45:A7:4D:B7:0C:FB:89:B2: A8:1A:BE:81:1B:75:5A:F1:A9:F2:4E:62:36:FD:A1:2E: 60:DC:DD:85:63:02:20:53:2E:93:1C:50:CB:A1:45:67: 92:4D:C4:DF:AF:CF:B5:17:C4:72:00:02:30:0D:9A:51: 56:BD:7E:A7:BD:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-SHA384 · Checked 2026-10-15T14:25:46+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:24:25+00:00
Expires
2027-11-02T12:24:25+00:00
Days remaining
382
Serial (hex)
090EE8C5DE5BFA62D2AE2FF7097C4857
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2
Certificate extensions & PEM
subjectKeyIdentifier
A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →