DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nette.pl · 193.138.118.3:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.nette.pl
Issuer
C=LV L=Riga O=GoGetSSL CN=GoGetSSL RSA DV CA
Valid from
2023-06-01T00:00:00+00:00
Expires
2024-05-20T23:59:59+00:00
Days remaining
-868
Serial (hex)
D0B08F0EA12870F95FA2AEDD321BBF3D
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.nette.pl, DNS:nette.pl

SHA-256 fingerprint

C3:6E:F8:86:A2:7B:85:78:CC:40:EE:64:69:D6:E4:D4:49:67:02:EB:52:5F:50:C7:47:68:8C:DE:C8:98:45:E8
Certificate extensions & PEM
authorityKeyIdentifier
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
subjectKeyIdentifier
1D:EC:53:67:92:3A:3A:77:C4:84:5A:20:BC:E4:EF:12:C8:E1:00:B9
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.64 CPS: https://cps.usertrust.com Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt OCSP - URI:http://ocsp.usertrust.com
subjectAltName
DNS:*.nette.pl, DNS:nette.pl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34: B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74 Timestamp : Jun 1 12:50:14.175 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7E:91:31:E0:C6:58:39:D2:CA:76:F9:C5: 2E:1F:13:84:2E:7E:E4:CB:C8:01:DA:64:37:1E:D8:80: 46:BA:29:B0:02:21:00:D8:31:A9:75:24:CF:CF:83:D0: BA:AB:FD:3B:5B:B9:7E:25:D3:4E:33:70:FE:DA:10:52: B5:86:94:CA:AC:D7:DC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70: 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB Timestamp : Jun 1 12:50:14.268 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E1:CD:89:7F:F7:0D:F5:99:EE:7B:1C: ED:E1:7B:CB:33:0E:68:EA:00:AD:90:6F:DC:33:E7:8E: 6F:DD:3C:5B:B3:02:20:6B:D4:E5:E3:BE:23:1C:0C:32: 80:04:69:BA:96:C6:1A:B1:2B:89:82:A6:43:9F:F1:85: 5B:56:27:DF:26:3E:90 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2: 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B Timestamp : Jun 1 12:50:14.222 2023 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C3:CB:78:CB:28:F9:AC:E7:62:43:A0: A1:03:F1:B0:85:AC:80:42:8F:49:17:26:12:29:E1:AA: C3:80:A6:57:38:02:20:05:7A:55:B1:BB:A1:09:DC:9D: D4:E4:FB:98:FB:70:52:BA:08:CC:51:AE:20:32:0D:9C: 06:CE:1A:7F:AE:35:0C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-05T23:56:02+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=LV L=Riga O=GoGetSSL CN=GoGetSSL RSA DV CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-09-06T00:00:00+00:00
Expires
2028-09-05T23:59:59+00:00
Days remaining
701
Serial (hex)
938BB08E62987B4F75F98CB6A5045C96
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

43:CA:C3:1E:F8:E8:BA:1B:4B:16:B8:20:6E:4C:0A:26:C5:BA:DB:2F:C3:AA:09:E9:01:70:E4:1B:66:C2:FD:64
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.64 Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
818
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →