THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mxhost1.lhost.no · 5.158.192.71:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.lhost.no
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Valid from
2025-11-18T00:00:00+00:00
Expires
2026-12-19T23:59:59+00:00
Days remaining
61
Serial (hex)
7A8C593AE4364AC2FDB4FC8CBDD5AC7B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.lhost.no, DNS:lhost.no

SHA-256 fingerprint

68:3C:93:A0:12:BC:98:74:67:3B:E8:AC:55:58:84:E2:91:4F:D7:29:45:F5:89:D5:4B:38:52:04:58:9E:4C:9E
Certificate extensions & PEM
authorityKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
subjectKeyIdentifier
3D:C1:3F:4A:E7:A3:A6:38:00:CA:FD:B1:9E:7D:59:33:02:CD:BE:D9
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.lhost.no, DNS:lhost.no
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 18 10:50:44.126 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:5B:45:5F:7F:1D:13:C7:E7:F8:73: F5:CE:62:F5:EA:E6:84:CC:8E:4E:06:94:ED:D2:E2:97: 8B:EF:6B:0A:9A:02:21:00:C6:6D:0E:42:A8:D3:5D:28: D7:32:03:24:CF:80:64:C3:39:7C:3F:87:29:95:96:9B: 34:AE:7E:DE:F0:86:B4:60 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 18 10:50:47.277 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F8:9B:D8:A6:F8:65:AD:17:7D:A7:81: 19:21:48:4D:EE:65:74:42:64:51:6A:0D:49:1B:C3:FC: C6:1C:0C:33:4F:02:20:3B:78:8D:54:FA:AD:46:43:DF: 85:99:77:77:A5:E5:F6:CC:BF:32:46:B2:F5:85:9C:92: D5:26:C3:52:5F:A9:7E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 18 10:50:44.020 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F2:73:EF:7E:6D:67:EE:81:BB:AD:AD: AF:A6:04:66:3D:5E:F6:B1:07:D5:51:36:D6:D7:7F:00: A5:24:61:52:A2:02:20:70:55:3E:5A:79:E8:C3:56:15: 7C:F3:A3:CA:41:D0:45:3D:C5:34:B9:23:28:F9:2E:6B: 5B:C1:F0:FF:F4:1F:F1
-----BEGIN CERTIFICATE-----
MIIGbjCCBNagAwIBAgIQeoxZOuQ2SsL9tPyMvdWsezANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2
MB4XDTI1MTExODAwMDAwMFoXDTI2MTIxOTIzNTk1OVowFTETMBEGA1UEAwwKKi5s
aG9zdC5ubzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKmSW3vWnD0x
u6Vgjgr275QZU+AuVMGcUXTKVdVGuiFhUGSsBV9KjActfLT8K6i3bnbSIQpSJtNp
MdI6sdaXQbnf/JlyETWwGETZUcJZ2U5dXceHKHc67zrUgMZ0l1uUwrJ0FjmTVrz1
auFGjLBtmtHgtaEXPBPu3in2uqnJPzB3jrrNbGtTd2F3ZYgS9qJDUJ7ArEAni/9I
693bsuV8F23yjVX2e5htsD3LT8nxP/ne4DWoxVeroj5zGSLvcH1sRm1uebSRfS+S
oUczCpst1JWMNGGCOGxBjs9wL35776Rqesfn3E8L/tiKf7s5++6nd6YaPQWKM7EG
h5xFhc/NSKECAwEAAaOCAu0wggLpMB8GA1UdIwQYMBaAFGjAEhYYDq/O9oemMlej
RlFdywcnMB0GA1UdDgQWBBQ9wT9K56OmOADK/bGefVkzAs2+2TAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDATBJBgNVHSAE
QjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln
by5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAC
hkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNTZXJ2ZXJBdXRo
ZW50aWNhdGlvbkNBRFZSMzYuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5z
ZWN0aWdvLmNvbTAfBgNVHREEGDAWggoqLmxob3N0Lm5vgghsaG9zdC5ubzCCAX8G
CisGAQQB1nkCBAIEggFvBIIBawFpAHcA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYP
FdEucrtFSxQAAAGalpacHgAABAMASDBGAiEAkFtFX38dE8fn+HP1zmL16uaEzI5O
BpTt0uKXi+9rCpoCIQDGbQ5CqNNdKNcyAyTPgGTDOXw/hymVlps0rn7e8Ia0YAB2
AK9niDtXsE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6AAABmpaWqG0AAAQDAEcw
RQIhAPib2Kb4Za0XfaeBGSFITe5ldEJkUWoNSRvD/MYcDDNPAiA7eI1U+q1GQ9+F
mXd3peX2zL8yRrL1hZyS1SbDUl+pfgB2AKyrMHBs6+yEMfQT0vSRXxEeQiRDsfKm
jE88KzunHgLDAAABmpaWm7QAAAQDAEcwRQIhAPJz735tZ+6Bu62tr6YEZj1e9rEH
1VE21td/AKUkYVKiAiBwVT5aeejDVhV886PKQdBFPcU0uSMo+S5rW8Hw//Qf8TAN
BgkqhkiG9w0BAQsFAAOCAYEAKSYRxPDb+pkt2jf/lMgz37EbE59DpZRToaLYkn9C
6HypXiv/PY0ZyekYK+8xFUPNM2heTa/T7qK1yuPKtIdvsVC1o+fQ+1SWgfSIuThj
ooPFVsmOt4ia8WMz1rH/FXgspK20Wge+Q3cOL6lYyvZfchYBSR8MoRAJqUT1NwOe
i3mawWiZMH5SJXJT8dYP4clP4DnwlqzowxEAKAhWt8XVX8oHoNwLAHcLYFUe3FNn
60m1LcTbp1oUFTimHUJa3YOoCyQ8aiWL+z3euzIn8J7OaXgoZmRhjbegXIVqkc1X
PrgnLWwAx/iAEgXs/k4XE/EwLOK3hGv9OwbZyQYiYr0lJ79uVYVNNqbpPFhfZeHS
jLI1fpg1VwFJeODybAiGeObktgcrOmfI5u6ghjWjaKeBHi96DRwLfuLrRPTf2b08
38yeEcq7N4jFhjBQIEQiCMgedb7YdPGVn7a7/haeacjp32PjcdSdNfygfkOt7sU8
MNdkNnqzp2yuhbxHx3n3Hynf
-----END CERTIFICATE-----

Cipher: TLS_CHACHA20_POLY1305_SHA256 · Checked 2026-10-19T20:48:38+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3441
Serial (hex)
397A66CC2756362E0DAA87CA6EABE3B1
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----
MIIGTDCCBDSgAwIBAgIQOXpmzCdWNi4NqofKbqvjsTANBgkqhkiG9w0BAQwFADBf
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD
Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw
HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY
MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp
YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2MIIBojANBgkqhkiG9w0B
AQEFAAOCAY8AMIIBigKCAYEAljZf2HIz7+SPUPQCQObZYcrxLTHYdf1ZtMRe7Yeq
RPSwygz16qJ9cAWtWNTcuICc++p8Dct7zNGxCpqmEtqifO7NvuB5dEVexXn9RFFH
12Hm+NtPRQgXIFjx6MSJcNWuVO3XGE57L1mHlcQYj+g4hny90aFh2SCZCDEVkAja
EMMfYPKuCjHuuF+bzHFb/9gV8P9+ekcHENF2nR1efGWSKwnfG5RawlkaQDpRtZTm
M64TIsv/r7cyFO4nSjs1jLdXYdz5q3a4L0NoabZfbdxVb+CUEHfB0bpulZQtH1Rv
38e/lIdP7OTTIlZh6OYL6NhxP8So0/sht/4J9mqIGxRFc0/pC8suja+wcIUna0HB
pXKfXTKpzgis+zmXDL06ASJf5E4A2/m+Hp6b84sfPAwQ766rI65mh50S0Di9E3Pn
2WcaJc+PILsBmYpgtmgWTR9eV9otfKRUBfzHUHcVgarub/XluEpRlTtZudU5xbFN
xx/DgMrXLUAPaI60fZ6wA+PTAgMBAAGjggGBMIIBfTAfBgNVHSMEGDAWgBRWc1hk
lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQUaMASFhgOr872h6YyV6NGUV3LBycw
DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgEw
VAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdv
UHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290UjQ2LmNybDCBhAYIKwYBBQUH
AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp
Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYucDdjMCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA
YtOC9Fy+TqECFw40IospI92kLGgoSZGPOSQXMBqmsGWZUQ7rux7cj1du6d9rD6C8
ze1B2eQjkrGkIL/OF1s7vSmgYVafsRoZd/IHUrkoQvX8FZwUsmPu7amgBfaY3g+d
q1x0jNGKb6I6Bzdl6LgMD9qxp+3i7GQOnd9J8LFSietY6Z4jUBzVoOoz8iAU84OF
h2HhAuiPw1ai0VnY38RTI+8kepGWVfGxfBWzwH9uIjeooIeaosVFvE8cmYUB4TSH
5dUyD0jHct2+8ceKEtIoFU/FfHq/mDaVnvcDCZXtIgitdMFQdMZaVehmObyhRdDD
4NQCs0gaI9AAgFj4L9QtkARzhQLNyRf87Kln+YU0lgCGr9HLg3rGO8q+Y4ppLsOd
unQZ6ZxPNGIfOApbPVf5hCe58EZwiWdHIMn9lPP6+F404y8NNugbQixBber+x536
WrZhFZLjEkhp7fFXf9r32rNPfb74X/U90Bdy4lzp3+X1ukh1BuMxA/EEhDoTOS3l
7ABvc7BYSQubQ2490OcdkIzUh3ZwDrakMVrbaTxUM2p24N6dB+ns2zptWCva6jzW
r8IWKIMxzxLPv5Kt3ePKcUdvkBU/smqujSczTzzSjIoR5QqQA6lN1ZRSnuHIWCvh
JEltkYnTAH41QJ6SAWO66GrrUESwN/cgZzL4JLEqz1Y=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →