DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mxa-009f8f01.gslb.pphosted.com · 66.159.244.18:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `mxa-009f8f01.gslb.pphosted.com'
The certificate expires within 30 days.

Certificate verification failed

Subject
C=GB ST=Middlesex O=Sky UK Limited CN=portal.securemail.sky
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2025-11-19T00:00:00+00:00
Expires
2026-11-19T23:59:59+00:00
Days remaining
11
Serial (hex)
FCC9FFE3CC7962F4087A8B3688A2774B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:portal.securemail.sky

SHA-256 fingerprint

8E:1E:5F:6C:CA:86:07:88:EC:D6:5C:C4:40:5B:66:E2:0E:51:C2:BC:59:8E:34:CC:BC:77:63:6F:79:0C:6C:AF
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
35:F4:89:FC:4F:B9:F8:58:B2:0B:9E:05:2E:82:4C:9C:10:D5:03:79
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:portal.securemail.sky
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 19 13:59:59.508 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:01:F2:11:A1:E6:86:1B:38:DA:48:F1:54: 0D:F1:CA:86:80:6F:01:FA:21:66:CE:AE:87:B5:F2:38: F2:5C:5C:F5:02:20:7F:33:FD:05:B0:5E:10:BB:2A:CA: 93:06:10:70:1E:8E:A7:0E:28:0A:71:78:E1:A7:62:29: 0B:63:4D:7D:EE:E0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 19 13:59:59.703 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4F:19:DA:64:8B:C2:CB:04:C5:77:DC:31: 7E:A8:A2:71:27:4B:0C:66:C0:12:07:81:B6:D0:99:8B: D3:E3:23:D8:02:21:00:D7:63:36:2D:10:EC:76:F2:3D: 71:71:CD:64:02:16:E4:37:B9:CA:2F:E9:49:3A:5D:FE: 69:97:15:0E:FA:54:60 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 19 13:59:59.488 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:34:AB:7D:38:73:83:EE:CF:91:C6:5E:3A: A9:14:68:9E:B2:35:01:CC:0D:4F:7E:C2:E3:AC:72:1C: 46:D6:39:E6:02:21:00:A4:31:DF:92:5B:FC:0A:FD:81: 94:C7:D7:4B:48:F3:4D:70:2E:E0:E4:53:95:BF:AD:AC: E2:43:3D:B6:D5:98:C3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-08T04:54:01+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3421
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →