DNS
SSL certificate
TLSv1.2nic.ua · 159.223.1.62:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=*.nic.ua
- Issuer
- C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validation Server CA G3
- Valid from
- 2025-12-11T12:48:35+00:00
- Expires
- 2026-12-20T09:57:35+00:00
- Days remaining
- 74
- Serial (hex)
- 20A3E8E942431ACE02538D4F3EAF32B9
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:nic.ua, DNS:*.nic.ua
SHA-256 fingerprint
FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9
Certificate extensions & PEM
- basicConstraints
- CA:FALSE
- authorityKeyIdentifier
- 42:83:6D:80:7C:09:84:67:FD:80:57:AB:F1:26:F5:77:C8:22:82:71
- authorityInfoAccess
- CA Issuers - URI:http://cacert.actalis.it/certs/actalis-autdvg3 OCSP - URI:http://ocsp06.actalis.it/VA/AUTHDV-G3
- subjectAltName
- DNS:nic.ua, DNS:*.nic.ua
- certificatePolicies
- Policy: 1.3.159.1.23.1 CPS: https://www.actalis.it/area-download Policy: 2.23.140.1.2.1
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL
- subjectKeyIdentifier
- 2E:C8:8E:EF:B8:18:7B:F7:EE:53:0C:94:AD:2D:05:62:95:DA:AE:98
- keyUsage
- Digital Signature, Key Encipherment
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Dec 11 12:58:36.254 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C5:EB:23:6D:CC:5F:A4:2B:19:02:16: 0B:10:C1:EA:85:98:3E:E6:05:DA:16:CC:AD:CD:A2:65: BD:45:F5:57:9E:02:21:00:C1:56:6A:95:A9:8D:6E:B8: 5E:21:E5:B4:7D:75:B4:F9:1C:87:DE:0A:3E:3B:5C:5C: 09:86:BA:2F:ED:4B:03:12 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Dec 11 12:58:36.266 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:30:6C:56:39:5B:6B:5E:51:0D:DA:38:A2: 7C:24:60:C1:D1:4B:46:5E:41:56:80:5D:EE:06:B8:BC: 6C:B7:9F:58:02:20:0B:44:74:84:8A:B0:33:13:E4:3F: D9:DD:59:9C:5E:1C:3D:79:B6:D3:99:E4:F3:68:B9:24: D9:8C:8C:5C:3C:AC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Dec 11 12:58:36.329 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:07:1A:BF:19:00:66:20:AC:80:B8:83:EF: 52:1E:E5:FE:B0:32:E7:E6:FB:28:8F:D6:DE:E4:E1:6D: 37:CB:11:D1:02:21:00:A7:90:55:CE:50:62:6E:D1:5A: E1:DC:D8:5C:3D:2E:4D:94:3E:57:8C:B0:6B:77:D4:31: 34:A1:F7:4E:4E:35:49
-----BEGIN CERTIFICATE----- MIIHYDCCBUigAwIBAgIQIKPo6UJDGs4CU41PPq8yuTANBgkqhkiG9w0BAQsFADCB hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNTEyMTEx MjQ4MzVaFw0yNjEyMjAwOTU3MzVaMBMxETAPBgNVBAMMCCoubmljLnVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+CG8vYgtZsExYXskPxYF2ms3yJZ lFh96rtJjY4KSFdrLql+IbKtc9wMvfTYrLtl/XIR3puw4/ekvl3GKXA72WSLxAJ5 9+8ov/Y1O2cHEnxBlibNR7ByOpbnwxH0oOMrpR2k1a85vpXlVDiRYJ5UWeOZWUm9 /PzhmBK11pXBDjcJlFPDrOf14QfhRE+jOg9aTjvK0/sBLRnWlieqK8bO+nnPsO8C PNkLKlnWUcGkEqLubcTq8sl8Vv51uOp+ruqaKN245DESF2f2Aq1JZWJioWuapBRc 4mF0n5rqCXs6m+FrSGtLjs9k84jT0yrFjjUezizXp7IeTXKr8+LHnc8vrwIDAQAB o4IDPDCCAzgwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBRCg22AfAmEZ/2AV6vx JvV3yCKCcTB9BggrBgEFBQcBAQRxMG8wOgYIKwYBBQUHMAKGLmh0dHA6Ly9jYWNl cnQuYWN0YWxpcy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGR2ZzMwMQYIKwYBBQUHMAGG JWh0dHA6Ly9vY3NwMDYuYWN0YWxpcy5pdC9WQS9BVVRIRFYtRzMwGwYDVR0RBBQw EoIGbmljLnVhgggqLm5pYy51YTBRBgNVHSAESjBIMDwGBiuBHwEXATAyMDAGCCsG AQUFBwIBFiRodHRwczovL3d3dy5hY3RhbGlzLml0L2FyZWEtZG93bmxvYWQwCAYG Z4EMAQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBIBgNVHR8EQTA/ MD2gO6A5hjdodHRwOi8vY3JsMDYuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FVVEhE Vi1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBQuyI7vuBh79+5TDJStLQVildqumDAO BgNVHQ8BAf8EBAMCBaAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3ANdtfRDR p/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABmw198V4AAAQDAEgwRgIhAMXr I23MX6QrGQIWCxDB6oWYPuYF2hbMrc2iZb1F9VeeAiEAwVZqlamNbrheIeW0fXW0 +RyH3go+O1xcCYa6L+1LAxIAdQDYCVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5y u0VLFAAAAZsNffFqAAAEAwBGMEQCIDBsVjlba15RDdo4onwkYMHRS0ZeQVaAXe4G uLxst59YAiALRHSEirAzE+Q/2d1ZnF4cPXm205nk82i5JNmMjFw8rAB2AK9niDtX sE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6AAABmw198akAAAQDAEcwRQIgBxq/ GQBmIKyAuIPvUh7l/rAy5+b7KI/W3uThbTfLEdECIQCnkFXOUGJu0Vrh3NhcPS5N lD5XjLBrd9QxNKH3Tk41STANBgkqhkiG9w0BAQsFAAOCAgEATjhjK4qRwn8G0x6p 21G4xW20q9SXTwkDYJdztbw0sPBbLcRWds5g1f8omH6XPSUq9C1Cc5ru7FXQ4x80 IZsolaREypvTWPU1Ti8Bx8h4gkB5oGImpVKjtf0J/fw2EjWyiRZSUTptHrnHXNxQ SKAmRAzHOwjJlUFtM3RTLB1pIRNjhoE0EuUUC/y3xqmefFOTyOQownLqG04BwCGS IOOxfXa+3ex8zlLT2w1jVzGi09uCG18mGwrmDVxY/jWnsB683tOq9y8X0GRCcQtZ JBUlIfRmJlDILIUQ00h1fHUMa+a27J/AQBZeYM2zurSQ/Yw+qryeKNxQpEa/9R7C A6RhUsGoB+r2IkHG3IWutITZw5rjGq2RNs+hf9OGmmq99a4TzgWvkCU3ed+FjAZ9 ImyT21FCoEYgKdR7qS47ns6WwiaO54Vqej6oyt2AVyWsuGBAtstxPo+UF8bMWz4Y mHU8IW18irgB9YnMg2mZ652XxmrBQ8H6zvtVpiYGbHYNYIoTiVoIyMUY92PLJOi7 rgeviG48qIVVsrfTMqVIHHcdO3jR9QQbE/W6lrnhbNDOu38fHvziCoW9crr/3H7j LAhftT3MHYJHaVZ9HaI9B7w6NvRRaQfEdYRCo4z+M8KqgdWB68V+zfk19HM99jrE rZGnnlx8MA1nFMzMJsF4SpEGUds= -----END CERTIFICATE-----
Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-10-06T14:29:54+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validation Server CA G3
- Issuer
- C=IT L=Milan O=Actalis S.p.A./03358520967 CN=Actalis Authentication Root CA
- Valid from
- 2020-07-06T06:36:50+00:00
- Expires
- 2030-09-22T11:22:02+00:00
- Days remaining
- 1446
- Serial (hex)
- 12737797A315886DFEB76C7E6A5A0354
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
34:50:B6:D3:82:90:C3:CA:5D:7B:B3:8B:71:49:5B:BF:72:C6:D0:C4:4D:BA:29:22:45:F9:BC:A9:84:3A:9F:FF
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- authorityKeyIdentifier
- 52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
- authorityInfoAccess
- OCSP - URI:http://ocsp05.actalis.it/VA/AUTH-ROOT
- certificatePolicies
- Policy: X509v3 Any Policy CPS: https://www.actalis.it/area-download
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary Full Name: URI:http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL
- subjectKeyIdentifier
- 42:83:6D:80:7C:09:84:67:FD:80:57:AB:F1:26:F5:77:C8:22:82:71
- keyUsage
- Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIHcDCCBVigAwIBAgIQEnN3l6MViG3+t2x+aloDVDANBgkqhkiG9w0BAQsFADBr MQswCQYDVQQGEwJJVDEOMAwGA1UEBwwFTWlsYW4xIzAhBgNVBAoMGkFjdGFsaXMg Uy5wLkEuLzAzMzU4NTIwOTY3MScwJQYDVQQDDB5BY3RhbGlzIEF1dGhlbnRpY2F0 aW9uIFJvb3QgQ0EwHhcNMjAwNzA2MDYzNjUwWhcNMzAwOTIyMTEyMjAyWjCBhDEL MAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNh biBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZBY3Rh bGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALVGM4gsi80jpqFUmuK3Z0QKmhrCyEytbycoy44/ 0IN9lOxS8RHPHgqOOCwrK+WaFlELgfpv2Yx9HI4bMvZUeKKSBNgOTpxceBzUIIv7 T9eoeN9lrzSlbcdLq0TZFl2iNuBFKzMVhu3W+bb+UKR3JvrxFmjfHv9KuUJK6LgI xlfQaLCpXf25FMk1lSCqmgSVmRc59rIa2PNwHTnRcGqOHCX7kPQJ88JHjNGLHbVj 8QuOCLdZB7rADR2jsJ1p7rZAMksbNJ9gWdlmA3H0s9Z/4SJIU7R4RIcOpVzNqHo8 Jv4OhDo4ZoBysdaxDN7sRvTJos/2QAVB7/aPFanIQlaZpFBnZIzufAQ58FkbcBJY ZQf9lysjemiHJbqYrokqseaQ0NXOh36D2cEk6CIFK4j6D388K1gi1scikGz3GTei QXAxCaHwuco8e7cjzHRV5C+a/DBhEcErKNp0i1w20gYOdKpQTiu8IETYu8epjmIH 2BSJKWDwlDIDpiJAvtNmrKj2xYL+1F8nOJyEcx/M4mMrK5wdN2oWWSIiUwA0zUhg 0K21w2is0J2QuCBnDE+fL9FTud5V7Uq9w4ZaKgsQtzAjq9+vhIzfEbAZZnnr1odI VTSCcPVSd4mm6RDBWpbKIYCPpctov0kIYyowjUzZ4H26AsjVuOHk1Y0KszIQIvWz gDIpAgMBAAGjggH0MIIB8DAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFFLY iDrIn3hm7YnzezhwlMkCAjbQMEEGCCsGAQUFBwEBBDUwMzAxBggrBgEFBQcwAYYl aHR0cDovL29jc3AwNS5hY3RhbGlzLml0L1ZBL0FVVEgtUk9PVDBFBgNVHSAEPjA8 MDoGBFUdIAAwMjAwBggrBgEFBQcCARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9h cmVhLWRvd25sb2FkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATCB4wYD VR0fBIHbMIHYMIGWoIGToIGQhoGNbGRhcDovL2xkYXAwNS5hY3RhbGlzLml0L2Nu JTNkQWN0YWxpcyUyMEF1dGhlbnRpY2F0aW9uJTIwUm9vdCUyMENBLG8lM2RBY3Rh bGlzJTIwUy5wLkEuJTJmMDMzNTg1MjA5NjcsYyUzZElUP2NlcnRpZmljYXRlUmV2 b2NhdGlvbkxpc3Q7YmluYXJ5MD2gO6A5hjdodHRwOi8vY3JsMDUuYWN0YWxpcy5p dC9SZXBvc2l0b3J5L0FVVEgtUk9PVC9nZXRMYXN0Q1JMMB0GA1UdDgQWBBRCg22A fAmEZ/2AV6vxJvV3yCKCcTAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQAD ggIBACeAFKdmcRaIJbdy6mSR+NXzZulMEx3D3gsmOtd8Or0xcK351UH+uKZuAOQJ T/9vODD7/kVD46Ln2M9soJigiyxSRc+Pano2cpT/viqyYZEwIC1JKQWy1dsZNI4k c3gJMuN+KOu9gSjlXgyn+pTcjiFC7iWbpO4tt3HNtKjRkCBXGtp9mE4pQr7eyn3l 14Rf+E++3eMVsp39YZ7yUjUJzFiMGoPuwPaEsqnj0FYytJ7vqLzsHXGhvr3C3K8S Xzs5yQdgmGUDrkSHI1Bg0mlSQ1I9g4L3NKzZVJFbBW4p5AvbjmWQFMek0MOSVFNA 0J6NduiOMRCMtdCrEySiK8rai+UwVHXMDJwy016aodBsjmlydSgbSq9CWlKNQaUs tB3NHgzbZRexvXMP0BaPB0QyzWLZ2cMQ9DtaTtsvWFQn7J00FYPV9ZG3MMkBId+5 qk/q8c6UZ3u5kdehslZ31p40ptT1cNK0U/mRnMg2OzAR/l62Uq5v+Z6ZTiD469iR 2Tb24vQGa7G4NB8nMyC/MxPtmKlwLd1PTIlLpnkqvX266b3HAPGDyJj2B7NzEtIm 9WSR5HM+J+GFzssAyI/feJxA1cdLiOIyHtdMMRMjlsUxaMWsNzf55bifWl7Zttxm M14ovZrkI+kjvfoT83bXDOgsB5E5TZFg6q5azRdkx6AHC8ah -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.