DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nefos.nl · 45.154.165.130:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
Issuer
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validated TLS Server ECC CA 2025
Valid from
2026-09-01T02:02:50+00:00
Expires
2026-12-01T03:01:50+00:00
Days remaining
33
Serial (hex)
4A3604BF4747F40D77E4E6788DF30A34
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:nefos.nl, DNS:www.nefos.nl

SHA-256 fingerprint

6C:70:C1:8F:73:BE:7B:86:17:8C:23:39:08:9F:D1:0D:C1:6B:67:42:C0:31:8A:CC:87:D4:66:7E:B0:26:06:E9
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
3F:2B:EA:35:9C:76:59:0C:CD:91:7A:3E:2F:74:E5:3A:90:73:97:E0
authorityInfoAccess
CA Issuers - URI:http://cacert.actalis.it/certs/tls-subca-ecc-dv-2025 OCSP - URI:http://ocsp15.actalis.it/va/tls-subca-ecc-dv-2025
subjectAltName
DNS:nefos.nl, DNS:www.nefos.nl
certificatePolicies
Policy: 1.3.159.1.22.1 CPS: https://www.actalis.it/area-download Policy: 2.23.140.1.2.1
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl15.actalis.it/Repository/tls-subca-ecc-dv-2025/getLastCRL
subjectKeyIdentifier
DF:23:7F:5E:38:91:27:19:FC:72:B8:68:82:A0:52:41:89:7E:0A:9E
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Sep 1 02:12:51.701 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C2:EE:46:B2:5C:2D:7A:6F:84:1B:07: 70:21:9D:66:75:1D:D6:E6:AA:48:FE:3D:15:79:FF:40: 34:BF:CA:5E:8E:02:21:00:B4:41:DE:87:DB:08:7C:2D: 1F:20:A5:9E:E7:2B:ED:73:80:07:CC:B0:B2:92:E7:74: D3:A4:F2:73:A1:D0:20:1F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 74:DB:9D:58:F7:D4:7E:9D:FD:78:7A:16:2A:99:1C:18: CF:69:8D:A7:C7:29:91:8C:9A:18:B0:45:0D:BA:44:BC Timestamp : Sep 1 02:12:52.495 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:19:27:77:F9:CB:3C:37:56:03:6A:32:CB: C2:AD:B6:63:EC:42:A4:CE:09:28:4D:EB:C4:7B:42:C8: AF:9B:4D:43:02:20:31:77:1A:29:09:8D:3A:41:0F:90: 6C:1D:4B:45:22:82:FC:95:15:C8:08:9E:18:6A:03:DD: DC:D5:93:6B:79:39 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 1 02:12:51.890 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:44:E0:D5:86:C6:F2:7B:96:27:62:E3:C7: A4:CE:3E:6D:3B:65:A4:15:AF:8D:B3:D8:C0:8E:EA:BB: AB:17:3E:99:02:21:00:CF:3F:05:C0:D1:A1:61:7B:0E: 04:44:41:29:49:25:F1:AE:D2:BC:B6:F2:D1:93:FB:7E: F0:9F:DD:04:28:E3:CB
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-29T00:09:03+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validated TLS Server ECC CA 2025
Issuer
C=IT O=Actalis S.p.A. CN=Actalis TLS Server ECC Root CA 2025
Valid from
2025-07-07T09:52:12+00:00
Expires
2035-07-05T09:52:11+00:00
Days remaining
3171
Serial (hex)
7FA8268C4D449BF501861FBF572A77A7
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E1:02:A5:2A:01:6B:02:5B:31:C7:49:A9:A0:A7:F4:65:0E:12:27:AF:A2:7C:27:E9:A3:7C:84:6A:D4:2F:A8:B0
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
30:22:BD:D5:9A:B5:D2:87:2F:FF:A6:7C:A3:B5:4C:16:57:F0:AE:0C
authorityInfoAccess
CA Issuers - URI:http://cacert.actalis.it/certs/tls-root-ecc-2025 OCSP - URI:http://ocsp13.actalis.it/va/tls-root-ecc-2025
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.actalis.com/legal-repository
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl13.actalis.it/Repository/tls-root-ecc-2025/getLastCRL
subjectKeyIdentifier
3F:2B:EA:35:9C:76:59:0C:CD:91:7A:3E:2F:74:E5:3A:90:73:97:E0
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=IT O=Actalis S.p.A. CN=Actalis TLS Server ECC Root CA 2025
Issuer
C=IT L=Milan O=Actalis S.p.A./03358520967 CN=Actalis Authentication Root CA
Valid from
2025-08-07T08:09:33+00:00
Expires
2030-09-22T11:22:02+00:00
Days remaining
1424
Serial (hex)
082CDA83152D404731E1ECEA538371C4
Signature
RSA-SHA512
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

47:1F:64:46:99:FD:03:8E:07:D7:3D:6E:98:05:86:AA:23:2F:A7:DC:AD:57:38:0B:0C:89:ED:D1:DC:FD:B6:1E
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
authorityInfoAccess
OCSP - URI:http://ocsp05.actalis.it/VA/AUTH-ROOT
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL
subjectKeyIdentifier
30:22:BD:D5:9A:B5:D2:87:2F:FF:A6:7C:A3:B5:4C:16:57:F0:AE:0C
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →