DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nic.tv · 3.209.242.11:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`*.nic.design' did not match expected CN=`nic.tv'

Certificate verification failed

Subject
CN=*.nic.design
Issuer
C=US O=Amazon CN=Amazon RSA 2048 M04
Valid from
2025-11-02T00:00:00+00:00
Expires
2026-12-01T23:59:59+00:00
Days remaining
68
Serial (hex)
01B24FB7D03FEE827E1DFC14C092D125
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.nic.design, DNS:nic.design

SHA-256 fingerprint

8B:5D:26:3A:1E:7F:62:CA:21:5B:30:82:E9:77:E7:DB:0D:D6:27:58:F1:C7:2A:33:6B:D2:15:1B:58:0A:2B:BC
Certificate extensions & PEM
authorityKeyIdentifier
1F:52:92:61:56:82:54:7F:81:66:D8:1D:3D:0A:AA:32:5C:87:DD:08
subjectKeyIdentifier
66:7B:B4:19:32:52:54:1E:3D:79:91:3F:AC:CB:11:8B:29:47:87:AF
subjectAltName
DNS:*.nic.design, DNS:nic.design
certificatePolicies
Policy: 2.23.140.1.2.1
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.r2m04.amazontrust.com/r2m04.crl
authorityInfoAccess
OCSP - URI:http://ocsp.r2m04.amazontrust.com CA Issuers - URI:http://crt.r2m04.amazontrust.com/r2m04.cer
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 2 05:30:37.704 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B8:57:9F:35:9A:25:C8:E0:6D:67:C8: E8:15:7F:68:C6:57:C9:02:AA:0C:49:77:AD:95:B4:3B: E2:FC:7C:9B:37:02:21:00:A8:19:89:96:89:48:3F:7F: 3D:BE:BE:73:99:EF:F6:B6:67:AD:B8:01:EF:F5:04:63: D8:32:96:AC:9F:68:01:98 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 2 05:30:37.595 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AD:10:C6:89:9F:C2:A3:DE:DC:B1:F1: 49:F6:A2:8D:7F:3F:1F:36:E6:0A:73:ED:28:64:CB:8E: E1:AE:EA:AA:23:02:21:00:FE:3B:3D:06:26:1C:1D:77: B2:4C:ED:80:12:89:48:91:5E:F2:7C:28:0D:E9:4F:6B: 0A:F6:CE:D9:8B:5B:AA:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 2 05:30:37.619 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:EB:62:34:E8:FF:4B:9A:4C:4D:64:78: 05:9D:42:CE:F7:90:5B:81:6B:20:3F:7D:52:73:C3:43: BC:98:AE:C1:4B:02:20:0A:38:CC:7B:95:D3:1B:A1:17: B7:1C:CE:B4:A1:D6:39:38:FB:20:80:03:CB:13:E8:BA: AD:E1:F8:70:DD:63:C8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-24T13:11:16+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Amazon CN=Amazon RSA 2048 M04
Issuer
C=US O=Amazon CN=Amazon Root CA 1
Valid from
2022-08-23T22:26:35+00:00
Expires
2030-08-23T22:26:35+00:00
Days remaining
1429
Serial (hex)
0773124F2A952E3ED18A58BDB85D1BC0CE5F27
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:8B:DF:6E:23:AC:97:1E:B4:E6:26:B2:79:DD:6A:26:F0:57:51:0F:1D:E3:94:29:3A:5E:EA:28:60:DE:01:9B
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
1F:52:92:61:56:82:54:7F:81:66:D8:1D:3D:0A:AA:32:5C:87:DD:08
authorityKeyIdentifier
84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08
authorityInfoAccess
OCSP - URI:http://ocsp.rootca1.amazontrust.com CA Issuers - URI:http://crt.rootca1.amazontrust.com/rootca1.cer
crlDistributionPoints
Full Name: URI:http://crl.rootca1.amazontrust.com/rootca1.crl
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Amazon CN=Amazon Root CA 1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Services Root Certificate Authority - G2
Valid from
2015-05-25T12:00:00+00:00
Expires
2037-12-31T01:00:00+00:00
Days remaining
4115
Serial (hex)
067F944A2A27CDF3FAC2AE2B01F908EEB9C4C6
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:DC:D4:DC:74:64:0A:32:2C:D2:05:55:25:06:D1:BE:64:F1:25:96:25:80:96:54:49:86:B4:85:0B:C7:27:06
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08
authorityKeyIdentifier
9C:5F:00:DF:AA:01:D7:30:2B:38:88:A2:B8:6D:4A:9C:F2:11:91:83
authorityInfoAccess
OCSP - URI:http://ocsp.rootg2.amazontrust.com CA Issuers - URI:http://crt.rootg2.amazontrust.com/rootg2.cer
crlDistributionPoints
Full Name: URI:http://crl.rootg2.amazontrust.com/rootg2.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →