DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

netaffairs.nl · 195.149.119.100:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.netaffairs.nl
Issuer
C=LV L=Riga O=GoGetSSL CN=GoGetSSL RSA DV CA
Valid from
2026-01-12T00:00:00+00:00
Expires
2027-02-12T23:59:59+00:00
Days remaining
115
Serial (hex)
5E4698F153CE3A49168FC59F65FB1016
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.netaffairs.nl, DNS:netaffairs.nl

SHA-256 fingerprint

B9:76:68:1C:1A:29:29:13:D5:90:8D:B9:3A:CD:01:29:32:D7:0E:D5:7D:62:7F:BA:B9:A8:88:1F:35:12:F6:E8
Certificate extensions & PEM
authorityKeyIdentifier
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
subjectKeyIdentifier
AE:1C:27:02:C6:F0:44:26:F9:63:09:86:DE:75:5B:55:73:47:42:75
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.64 CPS: https://cps.usertrust.com Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt OCSP - URI:http://ocsp.usertrust.com
subjectAltName
DNS:*.netaffairs.nl, DNS:netaffairs.nl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 12 09:19:36.808 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A6:18:83:BD:75:6C:9A:16:CC:5B:3C: 30:18:7D:3E:46:FD:04:92:02:78:64:5F:93:88:46:B2: 62:44:1F:13:26:02:20:11:62:5A:EB:B1:A9:3C:BC:D0: 1E:85:02:7D:8A:87:00:20:DE:1A:86:AD:FB:A2:0E:85: 59:1A:32:FA:CA:5C:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jan 12 09:19:37.186 2026 GMT Extensions: 00:00:05:00:01:53:E9:66 Signature : ecdsa-with-SHA256 30:45:02:21:00:C9:7A:E9:75:11:73:AA:47:66:67:3C: 22:4B:A5:11:88:73:96:B0:E8:97:BE:61:B3:F9:90:EB: 70:7E:3F:74:42:02:20:3E:F0:E4:3E:22:BF:6E:96:3A: AF:49:B0:8B:83:19:53:FC:A8:7E:2F:7C:81:34:6B:8C: 22:5C:D3:16:AA:57:9E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jan 12 09:19:36.650 2026 GMT Extensions: 00:00:05:00:00:0C:42:F6 Signature : ecdsa-with-SHA256 30:46:02:21:00:84:F5:4F:20:E6:69:7B:84:05:F7:57: D0:E3:76:64:0B:14:2F:3A:CC:96:45:EF:FE:71:8A:2D: 7F:D8:8F:67:DC:02:21:00:B2:52:2F:FA:67:4B:18:D1: CC:88:E0:5F:E1:E8:F7:00:14:E1:A4:9A:F9:2A:CD:35: 07:9A:AC:87:D9:93:1D:B8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-20T20:00:15+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=LV L=Riga O=GoGetSSL CN=GoGetSSL RSA DV CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-09-06T00:00:00+00:00
Expires
2028-09-05T23:59:59+00:00
Days remaining
686
Serial (hex)
938BB08E62987B4F75F98CB6A5045C96
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

43:CA:C3:1E:F8:E8:BA:1B:4B:16:B8:20:6E:4C:0A:26:C5:BA:DB:2F:C3:AA:09:E9:01:70:E4:1B:66:C2:FD:64
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.64 Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
803
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →