SSL certificate
TLSv1.3navega.com · 103.224.182.246:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=paychase.com
- Issuer
- C=US O=Let's Encrypt CN=YE1
- Valid from
- 2026-09-10T13:13:03+00:00
- Expires
- 2026-12-09T13:13:02+00:00
- Days remaining
- 71
- Serial (hex)
- 0639F3EA986F1EDCEE415CADE3F9A35D3EBF
- Signature
- ecdsa-with-SHA384
- Public key
- EC 256 prime256v1
Subject alternative names (SAN)
DNS:*.a.navega.com, DNS:*.access.navega.com, DNS:*.admin.eggmass.com, DNS:*.admin.navega.com, DNS:*.admin.paychase.com, DNS:*.antispam.paychase.com, DNS:*.api.eggmass.com, DNS:*.app.eggmass.com, DNS:*.app.paychase.com, DNS:*.apps.navega.com, DNS:*.at.navega.com, DNS:*.backend.eggmass.com, DNS:*.bbs.kamakazi.com, DNS:*.bch.navega.com, DNS:*.bsd.kamakazi.com, DNS:*.community.navega.com, DNS:*.comwww.navega.com, DNS:*.corp.eggmass.com, DNS:*.cyberplay.navega.com, DNS:*.dashboard.eggmass.com, DNS:*.dev.eggmass.com, DNS:*.dev.paychase.com, DNS:*.direct.navega.com, DNS:*.e.navega.com, DNS:*.eggmass.com, DNS:*.floriculturetp.com, DNS:*.forums.navega.com, DNS:*.fr.navega.com, DNS:*.ftp.navega.com, DNS:*.gate.navega.com, DNS:*.hostmaster.paychase.com, DNS:*.hosts.navega.com, DNS:*.imaps.navega.com, DNS:*.internal.eggmass.com, DNS:*.kamakazi.com, DNS:*.keycloak.navega.com, DNS:*.lotus.navega.com, DNS:*.lotushn.navega.com, DNS:*.mail.navega.com, DNS:*.mail02.paychase.com, DNS:*.mail12.paychase.com, DNS:*.mail2.paychase.com, DNS:*.mail3.paychase.com, DNS:*.mail5.paychase.com, DNS:*.mail7.paychase.com, DNS:*.mail8.paychase.com, DNS:*.mails.paychase.com, DNS:*.mx.navega.com, DNS:*.navega.com, DNS:*.navegaplus.navega.com, DNS:*.noc.navega.com, DNS:*.nocnavegasv.navega.com, DNS:*.office.navega.com, DNS:*.paychase.com, DNS:*.paypal-www.navega.com, DNS:*.pki.navega.com, DNS:*.portal.paychase.com, DNS:*.qa1.navega.com, DNS:*.random.paychase.com, DNS:*.rgherg.eggmass.com, DNS:*.secure.navega.com, DNS:*.secure.paychase.com, DNS:*.shop.navega.com, DNS:*.smtpauth.navega.com, DNS:*.smtpseguro.paychase.com, DNS:*.sslvpn.navega.com, DNS:*.staging.eggmass.com, DNS:*.survey.navega.com, DNS:*.tas.navega.com, DNS:*.test.paychase.com, DNS:*.track.navega.com, DNS:*.uat.eggmass.com, DNS:*.vela.navega.com, DNS:*.vimall.navega.com, DNS:*.wbanegas.navega.com, DNS:*.whatsapp.navega.com, DNS:*.wiki.navega.com, DNS:*.wildcard.paychase.com, DNS:*.ww1.navega.com, DNS:*.ww25.navega.com, DNS:*.ww25.paychase.com, DNS:*.ww38.paychase.com, DNS:*.www.navega.com, DNS:*.www3.navega.com, DNS:*.zdm.navega.com, DNS:eggmass.com, DNS:floriculturetp.com, DNS:kamakazi.com, DNS:navega.com, DNS:paychase.com
SHA-256 fingerprint
73:66:28:D6:77:7C:CE:04:77:3C:51:36:C2:24:EB:9E:0E:C0:1A:F9:0F:B6:DD:B8:58:46:A3:C8:31:A7:FC:86
Certificate extensions & PEM
- keyUsage
- Digital Signature
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:FALSE
- subjectKeyIdentifier
- 48:36:C7:13:13:46:1F:AB:7B:E3:0C:3F:39:4D:AD:9B:87:17:0E:71
- authorityKeyIdentifier
- BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8
- authorityInfoAccess
- CA Issuers - URI:http://ye1.i.lencr.org/
- subjectAltName
- DNS:*.a.navega.com, DNS:*.access.navega.com, DNS:*.admin.eggmass.com, DNS:*.admin.navega.com, DNS:*.admin.paychase.com, DNS:*.antispam.paychase.com, DNS:*.api.eggmass.com, DNS:*.app.eggmass.com, DNS:*.app.paychase.com, DNS:*.apps.navega.com, DNS:*.at.navega.com, DNS:*.backend.eggmass.com, DNS:*.bbs.kamakazi.com, DNS:*.bch.navega.com, DNS:*.bsd.kamakazi.com, DNS:*.community.navega.com, DNS:*.comwww.navega.com, DNS:*.corp.eggmass.com, DNS:*.cyberplay.navega.com, DNS:*.dashboard.eggmass.com, DNS:*.dev.eggmass.com, DNS:*.dev.paychase.com, DNS:*.direct.navega.com, DNS:*.e.navega.com, DNS:*.eggmass.com, DNS:*.floriculturetp.com, DNS:*.forums.navega.com, DNS:*.fr.navega.com, DNS:*.ftp.navega.com, DNS:*.gate.navega.com, DNS:*.hostmaster.paychase.com, DNS:*.hosts.navega.com, DNS:*.imaps.navega.com, DNS:*.internal.eggmass.com, DNS:*.kamakazi.com, DNS:*.keycloak.navega.com, DNS:*.lotus.navega.com, DNS:*.lotushn.navega.com, DNS:*.mail.navega.com, DNS:*.mail02.paychase.com, DNS:*.mail12.paychase.com, DNS:*.mail2.paychase.com, DNS:*.mail3.paychase.com, DNS:*.mail5.paychase.com, DNS:*.mail7.paychase.com, DNS:*.mail8.paychase.com, DNS:*.mails.paychase.com, DNS:*.mx.navega.com, DNS:*.navega.com, DNS:*.navegaplus.navega.com, DNS:*.noc.navega.com, DNS:*.nocnavegasv.navega.com, DNS:*.office.navega.com, DNS:*.paychase.com, DNS:*.paypal-www.navega.com, DNS:*.pki.navega.com, DNS:*.portal.paychase.com, DNS:*.qa1.navega.com, DNS:*.random.paychase.com, DNS:*.rgherg.eggmass.com, DNS:*.secure.navega.com, DNS:*.secure.paychase.com, DNS:*.shop.navega.com, DNS:*.smtpauth.navega.com, DNS:*.smtpseguro.paychase.com, DNS:*.sslvpn.navega.com, DNS:*.staging.eggmass.com, DNS:*.survey.navega.com, DNS:*.tas.navega.com, DNS:*.test.paychase.com, DNS:*.track.navega.com, DNS:*.uat.eggmass.com, DNS:*.vela.navega.com, DNS:*.vimall.navega.com, DNS:*.wbanegas.navega.com, DNS:*.whatsapp.navega.com, DNS:*.wiki.navega.com, DNS:*.wildcard.paychase.com, DNS:*.ww1.navega.com, DNS:*.ww25.navega.com, DNS:*.ww25.paychase.com, DNS:*.ww38.paychase.com, DNS:*.www.navega.com, DNS:*.www3.navega.com, DNS:*.zdm.navega.com, DNS:eggmass.com, DNS:floriculturetp.com, DNS:kamakazi.com, DNS:navega.com, DNS:paychase.com
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://ye1.c.lencr.org/64.crl
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Sep 10 14:11:34.194 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0F:F2:6C:6A:6C:18:37:03:B3:18:83:6D: 00:31:43:A3:6E:80:B2:CA:B9:F8:99:82:BA:F2:E9:C6: 78:B3:DF:12:02:20:36:97:D3:EA:A7:45:E7:7A:3F:CD: 02:5B:50:D1:0D:09:DF:77:B3:40:00:05:46:0F:E4:54: 51:D6:8E:06:67:28 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:8B:9D:6B:0F:FE:BF:81:B4:79:39:C6:D2:31:0A:86: D6:D1:02:D4:F0:46:E2:18:2C:9D:E3:5F:5E:26:25:EF Timestamp : Sep 10 14:11:34.712 2026 GMT Extensions: 00:00:05:00:3E:F7:BF:5C Signature : ecdsa-with-SHA256 30:45:02:20:46:3D:C8:DD:F8:03:16:1C:6F:25:4C:F3: 37:23:0F:BF:A2:49:A1:DC:06:F8:A8:FD:AC:4D:39:DA: 68:1C:54:D2:02:21:00:FF:CC:DF:77:C3:3F:93:6E:86: E9:84:8F:6F:F0:25:D3:FE:38:7A:B1:FE:11:78:65:29: 7C:FD:F8:BD:09:3C:7F
-----BEGIN CERTIFICATE----- MIIKozCCCimgAwIBAgISBjnz6phvHtzuQVyt4/mjXT6/MAoGCCqGSM49BAMDMDMx CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZ RTEwHhcNMjYwOTEwMTMxMzAzWhcNMjYxMjA5MTMxMzAyWjAXMRUwEwYDVQQDEwxw YXljaGFzZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQhMkFU56chsXY5 fN1M0c2bDFPGZgV6BypuPgC6M4CKn9QbR0BuWNFqYLz4Bosbt+WEBf8XuNogl/l+ opQ+ALDgo4IJNzCCCTMwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUF BwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEg2xxMTRh+re+MMPzlNrZuHFw5x MB8GA1UdIwQYMBaAFLsgykcL/tflnPmPCSqjjDdFsbzYMDMGCCsGAQUFBwEBBCcw JTAjBggrBgEFBQcwAoYXaHR0cDovL3llMS5pLmxlbmNyLm9yZy8wggczBgNVHREE ggcqMIIHJoIOKi5hLm5hdmVnYS5jb22CEyouYWNjZXNzLm5hdmVnYS5jb22CEyou YWRtaW4uZWdnbWFzcy5jb22CEiouYWRtaW4ubmF2ZWdhLmNvbYIUKi5hZG1pbi5w YXljaGFzZS5jb22CFyouYW50aXNwYW0ucGF5Y2hhc2UuY29tghEqLmFwaS5lZ2dt YXNzLmNvbYIRKi5hcHAuZWdnbWFzcy5jb22CEiouYXBwLnBheWNoYXNlLmNvbYIR Ki5hcHBzLm5hdmVnYS5jb22CDyouYXQubmF2ZWdhLmNvbYIVKi5iYWNrZW5kLmVn Z21hc3MuY29tghIqLmJicy5rYW1ha2F6aS5jb22CECouYmNoLm5hdmVnYS5jb22C EiouYnNkLmthbWFrYXppLmNvbYIWKi5jb21tdW5pdHkubmF2ZWdhLmNvbYITKi5j b213d3cubmF2ZWdhLmNvbYISKi5jb3JwLmVnZ21hc3MuY29tghYqLmN5YmVycGxh eS5uYXZlZ2EuY29tghcqLmRhc2hib2FyZC5lZ2dtYXNzLmNvbYIRKi5kZXYuZWdn bWFzcy5jb22CEiouZGV2LnBheWNoYXNlLmNvbYITKi5kaXJlY3QubmF2ZWdhLmNv bYIOKi5lLm5hdmVnYS5jb22CDSouZWdnbWFzcy5jb22CFCouZmxvcmljdWx0dXJl dHAuY29tghMqLmZvcnVtcy5uYXZlZ2EuY29tgg8qLmZyLm5hdmVnYS5jb22CECou ZnRwLm5hdmVnYS5jb22CESouZ2F0ZS5uYXZlZ2EuY29tghkqLmhvc3RtYXN0ZXIu cGF5Y2hhc2UuY29tghIqLmhvc3RzLm5hdmVnYS5jb22CEiouaW1hcHMubmF2ZWdh LmNvbYIWKi5pbnRlcm5hbC5lZ2dtYXNzLmNvbYIOKi5rYW1ha2F6aS5jb22CFSou a2V5Y2xvYWsubmF2ZWdhLmNvbYISKi5sb3R1cy5uYXZlZ2EuY29tghQqLmxvdHVz aG4ubmF2ZWdhLmNvbYIRKi5tYWlsLm5hdmVnYS5jb22CFSoubWFpbDAyLnBheWNo YXNlLmNvbYIVKi5tYWlsMTIucGF5Y2hhc2UuY29tghQqLm1haWwyLnBheWNoYXNl LmNvbYIUKi5tYWlsMy5wYXljaGFzZS5jb22CFCoubWFpbDUucGF5Y2hhc2UuY29t ghQqLm1haWw3LnBheWNoYXNlLmNvbYIUKi5tYWlsOC5wYXljaGFzZS5jb22CFCou bWFpbHMucGF5Y2hhc2UuY29tgg8qLm14Lm5hdmVnYS5jb22CDCoubmF2ZWdhLmNv bYIXKi5uYXZlZ2FwbHVzLm5hdmVnYS5jb22CECoubm9jLm5hdmVnYS5jb22CGCou bm9jbmF2ZWdhc3YubmF2ZWdhLmNvbYITKi5vZmZpY2UubmF2ZWdhLmNvbYIOKi5w YXljaGFzZS5jb22CFyoucGF5cGFsLXd3dy5uYXZlZ2EuY29tghAqLnBraS5uYXZl Z2EuY29tghUqLnBvcnRhbC5wYXljaGFzZS5jb22CECoucWExLm5hdmVnYS5jb22C FSoucmFuZG9tLnBheWNoYXNlLmNvbYIUKi5yZ2hlcmcuZWdnbWFzcy5jb22CEyou c2VjdXJlLm5hdmVnYS5jb22CFSouc2VjdXJlLnBheWNoYXNlLmNvbYIRKi5zaG9w Lm5hdmVnYS5jb22CFSouc210cGF1dGgubmF2ZWdhLmNvbYIZKi5zbXRwc2VndXJv LnBheWNoYXNlLmNvbYITKi5zc2x2cG4ubmF2ZWdhLmNvbYIVKi5zdGFnaW5nLmVn Z21hc3MuY29tghMqLnN1cnZleS5uYXZlZ2EuY29tghAqLnRhcy5uYXZlZ2EuY29t ghMqLnRlc3QucGF5Y2hhc2UuY29tghIqLnRyYWNrLm5hdmVnYS5jb22CESoudWF0 LmVnZ21hc3MuY29tghEqLnZlbGEubmF2ZWdhLmNvbYITKi52aW1hbGwubmF2ZWdh LmNvbYIVKi53YmFuZWdhcy5uYXZlZ2EuY29tghUqLndoYXRzYXBwLm5hdmVnYS5j b22CESoud2lraS5uYXZlZ2EuY29tghcqLndpbGRjYXJkLnBheWNoYXNlLmNvbYIQ Ki53dzEubmF2ZWdhLmNvbYIRKi53dzI1Lm5hdmVnYS5jb22CEyoud3cyNS5wYXlj aGFzZS5jb22CEyoud3czOC5wYXljaGFzZS5jb22CECoud3d3Lm5hdmVnYS5jb22C ESoud3d3My5uYXZlZ2EuY29tghAqLnpkbS5uYXZlZ2EuY29tggtlZ2dtYXNzLmNv bYISZmxvcmljdWx0dXJldHAuY29tggxrYW1ha2F6aS5jb22CCm5hdmVnYS5jb22C DHBheWNoYXNlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8EJzAlMCOg IaAfhh1odHRwOi8veWUxLmMubGVuY3Iub3JnLzY0LmNybDCCAQsGCisGAQQB1nkC BAIEgfwEgfkA9wB1AK9niDtXsE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6AAAB oIuo2rIAAAQDAEYwRAIgD/JsamwYNwOzGINtADFDo26Assq5+JmCuvLpxniz3xIC IDaX0+qnRed6P80CW1DRDQnfd7NAAAVGD+RUUdaOBmcoAH4AGoudaw/+v4G0eTnG 0jEKhtbRAtTwRuIYLJ3jX14mJe8AAAGgi6jcuAAIAAAFAD73v1wEAwBHMEUCIEY9 yN34AxYcbyVM8zcjD7+iSaHcBvio/axNOdpoHFTSAiEA/8zfd8M/k26G6YSPb/Al 0/44erH+EXhlKXz9+L0JPH8wCgYIKoZIzj0EAwMDaAAwZQIxALc7+ChJoMNqoPnR GzkK6azhAgEzgHA9BZxYPeYT8fBmd+x+hG3PS2b1tLLk4xBnKAIwbtzQz8FQ7Ddw vY/6EVbZs1AvBSmqg5CzhK/notlQoosZ5bas9o0Sy4AjncMRW5qF -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-28T20:03:46+00:00
Server-presented chain · 3 additional certificates
Chain certificate 1
- Subject
- C=US O=Let's Encrypt CN=YE1
- Issuer
- C=US O=ISRG CN=Root YE
- Valid from
- 2025-09-03T00:00:00+00:00
- Expires
- 2028-09-02T23:59:59+00:00
- Days remaining
- 705
- Serial (hex)
- 5DDD70DD31F801C85C186A7A04B80AFE
- Signature
- ecdsa-with-SHA384
- Public key
- EC 384 secp384r1
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
A2:37:2D:06:43:1E:97:16:36:5E:EE:D4:7E:C0:20:35:14:97:D1:82:FC:C0:38:E4:57:E5:81:68:A0:3C:AC:07
Certificate extensions & PEM
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- subjectKeyIdentifier
- BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8
- authorityKeyIdentifier
- A3:C8:26:5A:8E:A1:4C:D0:35:63:FC:9B:23:C8:3A:AE:56:F3:4F:56
- authorityInfoAccess
- CA Issuers - URI:http://ye.i.lencr.org/
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://ye.c.lencr.org/
-----BEGIN CERTIFICATE----- MIICizCCAhGgAwIBAgIQXd1w3TH4AchcGGp6BLgK/jAKBggqhkjOPQQDAzAuMQsw CQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTAeFw0y NTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYD VQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZRTEwdjAQBgcqhkjOPQIBBgUr gQQAIgNiAAQHZVB1/mimla2hfSurylScjPMZaOJXLz/NnAc2sylm8WDyhU9Ccp+z ASQi5vSwGGJjSGklkD9fdPR8GpyDIOIjCEfrnbt/v+ZSEPLLEGbaM6EccDbN7p9x teIm2Avf+ryjge4wgeswDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF BwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLsgykcL/tflnPmPCSqj jDdFsbzYMB8GA1UdIwQYMBaAFKPIJlqOoUzQNWP8myPIOq5W809WMDIGCCsGAQUF BwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3llLmkubGVuY3Iub3JnLzATBgNV HSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veWUuYy5s ZW5jci5vcmcvMAoGCCqGSM49BAMDA2gAMGUCMQDgjUEahFT/h3DRakqiPZpLvPgf Zwkt6K2EOMmh1nvEzl83eMLYcod4GCl3b0J1Nn0CMBNYmEQJb4CEG5WoOe7aRn/L VKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA== -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=ISRG CN=Root YE
- Issuer
- C=US O=Internet Security Research Group CN=ISRG Root X2
- Valid from
- 2026-05-13T00:00:00+00:00
- Expires
- 2032-09-02T23:59:59+00:00
- Days remaining
- 2166
- Serial (hex)
- 872165FC34B6E5FBA8ADD5B3705FB53A
- Signature
- ecdsa-with-SHA384
- Public key
- EC 384 secp384r1
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
0F:C0:90:1C:CA:2B:AE:9E:9F:DB:B0:2D:50:D0:2F:10:94:F7:B3:66:72:08:69:91:B9:E8:97:62:6D:C4:85:F0
Certificate extensions & PEM
- keyUsage
- Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- A3:C8:26:5A:8E:A1:4C:D0:35:63:FC:9B:23:C8:3A:AE:56:F3:4F:56
- authorityKeyIdentifier
- 7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
- authorityInfoAccess
- CA Issuers - URI:http://x2.i.lencr.org/
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://x2.c.lencr.org/
-----BEGIN CERTIFICATE----- MIICpjCCAiugAwIBAgIRAIchZfw0tuX7qK3Vs3BftTowCgYIKoZIzj0EAwMwTzEL MAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo IEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjYwNTEzMDAwMDAwWhcN MzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4G A1UEAxMHUm9vdCBZRTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDwS/6vhrcVqcbBo +wgdI3fwn9x7DNJJOY/lTOti0vkwuRN87RhEhTH17E7XyFjWsPYhIPt/wzOqxTd2 b+4ZJNy9ID04YywF9U5zasDVyGSNErVNtz8uSGh5izW87j77GaOB6zCB6DAOBgNV HQ8BAf8EBAMCAQYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUo8gmWo6hTNA1Y/ybI8g6rlbzT1YwHwYDVR0jBBgwFoAUfEKW rt5LSDv6kviejM9ti6lyN5UwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZo dHRwOi8veDIuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1Ud HwQgMB4wHKAaoBiGFmh0dHA6Ly94Mi5jLmxlbmNyLm9yZy8wCgYIKoZIzj0EAwMD aQAwZgIxAMU19WCtmxVND8UHBZRoma49Z7jPs64Dma0eTu1OChVbB/2J7GV3nvYK Ax54uk1G9QIxAO0miLVJu8PLNiXXXkiE/gsK3CTRTF/aeo4bMX42Zw40csRU6AC2 6hSW1/IWaas6dg== -----END CERTIFICATE-----
Chain certificate 3
- Subject
- C=US O=Internet Security Research Group CN=ISRG Root X2
- Issuer
- C=US O=Internet Security Research Group CN=ISRG Root X1
- Valid from
- 2026-05-13T00:00:00+00:00
- Expires
- 2032-09-02T23:59:59+00:00
- Days remaining
- 2166
- Serial (hex)
- 6C8F1DC727C7117F7BAF853AC980F9CD
- Signature
- RSA-SHA256
- Public key
- EC 384 secp384r1
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
EE:5F:7A:BD:69:81:BB:02:55:63:2C:D8:F4:92:83:45:1B:4B:18:84:4D:12:04:0B:44:EE:00:F0:7B:8F:E2:C6
Certificate extensions & PEM
- keyUsage
- Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- 7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
- authorityKeyIdentifier
- 79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
- authorityInfoAccess
- CA Issuers - URI:http://x1.i.lencr.org/
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://x1.c.lencr.org/
-----BEGIN CERTIFICATE----- MIIEcDCCAligAwIBAgIQbI8dxyfHEX97r4U6yYD5zTANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNjA1MTMwMDAwMDBa Fw0zMjA5MDIyMzU5NTlaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5l dCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7 AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4H1MIHyMA4GA1UdDwEB/wQEAwIBBjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwHwYDVR0jBBgwFoAUebRZ5nu2 5eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRw Oi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1UdHwQg MB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcNAQELBQAD ggIBAD2/e9frmMxNpCV03qUHegg+MV2wz9644YoXdqtH8RyWYcBO7xfjjGEXdU1e /o0OkEFiynUCOSIk/vLLo7ttz6CPAeNlWfC0XNkoGeWgK6jjXvozBaGuGH5n0Ufo shMeWTuURqNN5G00sSXDTBrpp2+mgvdZQjb8K11TYMA25QA+YHNfbIEL0BniAhKS 2gsnJjSzrdZLI+EZ7SEyqdR2rkjd1KutLDU+n3TFyxjniZVGur4YlhMP3mY/dV95 IruAkkjOZier6hGBdEgZXXvaCz9u9iVEadsIE75pAGL8oHV5vxdARDiotRpul1IN /UZwzAbrfUFcw1HkAcYD/mlZfnQ2ieCF2MS7j3Vhv7JPDKp45fmykmzYNSrumRW0 upFFKDBOoF7hsOb7oLyHS+Uft6jOUfOrogj8YUx38hKb2K20r42OgsSdDdxdeYWc MS3Sb6mwJeSZEYxJ2gaXnDSPaKhhrNkYwljyVQyr4Nq+MEJytXNTnHqaAcrNwZlV pcJL1KBnMrMjP7eanvUwL3FYj3cF17jtboLt7gLoi4+2rWZFvn+w54jmd/FIuhhZ cEaU/wvU6BUNMtcVquVGHp7itQeDth5j+XL3j4WJ2SABwzUl6OeYdgpIt/ITZa+p TT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.