DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nexthop.no · 91.90.109.129:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.nexthop.no
Issuer
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Valid from
2026-07-27T08:55:55+00:00
Expires
2027-02-10T08:34:53+00:00
Days remaining
132
Serial (hex)
1CA437E1FFFDEEE2DEAB8570C75568F5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.nexthop.no, DNS:nexthop.no

SHA-256 fingerprint

65:45:3F:5A:B9:B9:40:6B:46:FD:35:46:C1:81:C8:27:60:8F:87:68:A8:13:F7:A6:1E:5B:D7:AD:19:57:DA:59
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-I-RSA-R1.cer OCSP - URI:http://ocsps.ssl.com
subjectAltName
DNS:*.nexthop.no, DNS:nexthop.no
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.38064.1.3.1.1
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSL.com-TLS-I-RSA-R1.crl
subjectKeyIdentifier
ED:8A:04:8B:48:51:E8:3C:49:95:31:69:A1:61:77:97:4C:A1:F3:BC
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Jul 27 09:05:56.542 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:83:DE:ED:3A:07:50:51:77:8D:A4:48: 8D:60:37:37:F9:D7:D1:C6:F4:C4:94:8A:25:DC:02:1F: 91:48:CC:01:15:02:20:42:B4:B7:49:CA:55:90:9F:3A: 37:10:4A:CB:04:39:E6:65:AA:E9:2F:AA:6F:BA:F9:8F: E2:B8:AF:79:C8:08:59 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 27 09:05:56.533 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:55:96:F4:F8:A0:70:1B:27:93:30:9A:76: 94:73:53:93:03:D8:01:3D:B0:44:01:42:11:16:0E:06: B9:36:35:7E:02:21:00:8D:37:6B:C8:D7:51:1F:C9:B9: E1:2A:12:FB:D7:68:CF:78:DA:CE:FD:25:28:8C:0E:92: 2E:91:51:D9:88:61:F3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 27 09:05:56.558 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:06:D7:12:E7:3A:72:34:31:97:51:71:62: BB:83:9E:DC:A9:88:8E:FC:78:50:60:AF:C4:B7:39:55: B5:D4:1A:B6:02:21:00:BD:65:E8:67:F5:D8:1C:DD:37: C6:1D:81:B7:8A:1C:AA:BD:F7:BF:48:E3:12:E4:1C:41: FD:39:E3:38:17:A3:9B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-01T00:01:30+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=SSL Corporation CN=SSL.com TLS Issuing RSA CA R1
Issuer
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Valid from
2022-10-21T17:02:03+00:00
Expires
2032-10-18T17:02:02+00:00
Days remaining
2209
Serial (hex)
26B9FFE4596FA61E1AF21C63D672748A
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BF:BC:39:E9:FA:2B:84:C9:A9:23:37:E2:34:4E:E2:38:1D:8D:3D:3A:E8:EA:75:EF:4E:48:E5:80:7E:D8:0C:69
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.ssl.com/repository
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-RSA.crl
subjectKeyIdentifier
79:BA:94:77:A0:0D:19:DD:34:E6:39:A4:FC:4C:A5:D2:5A:6D:F5:8C
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----
MIIGAjCCA+qgAwIBAgIQJrn/5Flvph4a8hxj1nJ0ijANBgkqhkiG9w0BAQsFADBO
MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQD
DBxTU0wuY29tIFRMUyBSU0EgUm9vdCBDQSAyMDIyMB4XDTIyMTAyMTE3MDIwM1oX
DTMyMTAxODE3MDIwMlowTzELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD1NTTCBDb3Jw
b3JhdGlvbjEmMCQGA1UEAwwdU1NMLmNvbSBUTFMgSXNzdWluZyBSU0EgQ0EgUjEw
ggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCsGwIUQNo72SnktXL5DrWq
zRx7JO52R8ymc5bzpZWCPGfU6XcZUQQl4acAlpxbox7f8MSUjen+gCIf5GjN9JpX
XGrNdhoUuvnHDM/cONSJXx7PjVAuHXglktH5ZXpVw19hjRfUG2a+CZuOEgKnJzL/
0NGJtREtqfrNy6KyoDz0H/a9VidAb4AImHiZOLuRaCBZPn+9Ugj9TWTFTEfdvcX0
or8vFnGaFw1lt6pTrnkstQH9aqYBx+d4CDjVkNaITaoJLbG8HJo1lmZS+RZ2VZZT
Gn28Wg5DdNyplWxzBVMcv+zhu1EKIlqSGuvHnXor2iFRFjBy1bVdi7sR+Vou4PUa
w/EQH4vLRYHHM2rUv/Z5qHcjDxfF+CXHrejES0PaYaA/ELJufScN/IxikaIORWuB
IUrr34pcLj+bFTlyr5CWGFbJFJeWsz5CQFxR3JJa1mkzfHHZiE1JZgojzaLYzKxz
tH2IbivPnMmMlUhLtuIW7h1JNGNeBD9b7pGd+IXPzhsCAwEAAaOCAVkwggFVMBIG
A1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0jBBgwFoAU+y437uOEeicuzRk1sTN8/9RE
QrkwTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzAChjBodHRwOi8vY2VydC5zc2wu
Y29tL1NTTGNvbS1UTFMtUm9vdC0yMDIyLVJTQS5jZXIwPwYDVR0gBDgwNjA0BgRV
HSAAMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnNzbC5jb20vcmVwb3NpdG9y
eTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwQQYDVR0fBDowODA2oDSg
MoYwaHR0cDovL2NybHMuc3NsLmNvbS9TU0xjb20tVExTLVJvb3QtMjAyMi1SU0Eu
Y3JsMB0GA1UdDgQWBBR5upR3oA0Z3TTmOaT8TKXSWm31jDAOBgNVHQ8BAf8EBAMC
AYYwDQYJKoZIhvcNAQELBQADggIBAKZ9PtxW2JsKR/yncBvfHA05VtQ0kQEqCVSz
2A3X371wf2cI+/aTFaFauBguePcTdIPcYqo7FFJ9GHCc9lN6IY9UEFCUkjtAYJ/J
3FqaS80OGqdp8bqdbeg2vmpV6T8RNj1aaEjOYcOvlzhXp8sgxzEgvSaiUklnx4A4
8vPnVQ/c+QsJ7SsFd1nzSd/+FtAiPRKKJsjLp0EC147g6Z3KHj4ymdiz3wlO+aff
UyfOeqrP+DNcMf7QuuCcNAzYExX6tYxWXdvIs/+2QyH0s3bSnCVl30IIOrbiZlSS
qXQtKYv2/Yc/M1Ws0nTUmprWdexrxlkkh4X8v9mqiQvMMzsB/pTlHICJvu4bE6pd
GG8hqlTryml2tefaMbcPadQIlZfOOHEiTxfEEYghbj3dhi+B1cb1W6TfstH0iRnL
2BZqH1X2NB2XL27lwptGkK+Pi4/edbgY3ZQM4Ylbq+zewYOeUn493lM97h/IApNi
sM6R4N1o61PLnJ88AYKI5NfhhbZAHmDoadbzKwjchqkXfjXtTH57ADcqEw9lfQOg
tqhV11c7AAYo1uqJflCVwoEjkUb1P2381YCDDdnq78XOQWPLYccZoumvkAD5BXj1
+etEwNgrK21W5wi5ZCfJLHhAxUvNxRAwwUswhbVNY/9yxUltpaXsutug019GSlBI
iTZinEPk
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Issuer
C=US O=SSL Corporation CN=SSL.com TLS RSA Root CA 2022
Valid from
2022-08-25T16:34:22+00:00
Expires
2046-08-19T16:34:21+00:00
Days remaining
7262
Serial (hex)
6FBEDAAD73BD0840E28B4DBED4F75B91
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8F:AF:7D:2E:2C:B4:70:9B:B8:E0:B3:36:66:BF:75:A5:DD:45:B5:DE:48:0F:8E:A8:D4:BF:E6:BE:BC:17:F2:ED
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
subjectKeyIdentifier
FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →