DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nipax.net · 91.205.40.30:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `nipax.net'

Certificate verification failed

Subject
CN=*.nipax.cz
Issuer
C=CZ O=Alpiro s.r.o. CN=Alpiro RSA DV SSL CA 2
Valid from
2025-12-19T00:00:00+00:00
Expires
2027-01-19T23:59:59+00:00
Days remaining
103
Serial (hex)
7258FAFC4AD3AA30EF09DA63BE648E38
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.nipax.cz, DNS:nipax.cz

SHA-256 fingerprint

0D:15:64:63:42:B9:D6:6A:04:E9:C0:27:11:86:8E:24:51:EC:66:15:F4:03:2D:95:57:A9:8A:A7:C6:1C:7D:28
Certificate extensions & PEM
authorityKeyIdentifier
75:08:D4:F8:C8:8C:9B:B5:8A:52:E3:A6:8D:22:DE:CA:47:8B:B6:7D
subjectKeyIdentifier
D5:F6:50:FB:3A:2A:E2:45:8E:EE:3F:17:10:31:2C:84:40:97:18:66
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/AlpiroRSADVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.nipax.cz, DNS:nipax.cz
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Dec 19 13:52:37.747 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E0:FA:A7:D2:A2:8D:07:F4:CC:B1:A3: A6:9D:F8:66:4E:67:D3:6E:90:E7:1B:64:ED:D6:43:CB: 70:DA:30:AD:89:02:20:57:57:C4:6A:1E:C2:8F:93:74: 2D:E4:18:5B:05:73:9A:EC:79:73:3D:6A:56:F2:C0:E1: 72:0B:91:17:4A:BB:32 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Dec 19 13:52:38.186 2025 GMT Extensions: 00:00:05:00:00:95:3A:DC Signature : ecdsa-with-SHA256 30:45:02:20:56:B5:50:DF:16:BA:67:30:A1:92:E4:B4: 3B:9A:57:B5:BC:56:F3:65:2B:E1:3E:4F:80:43:D0:A7: BB:BB:9C:07:02:21:00:D0:6F:88:00:E9:45:56:DB:1F: 15:22:33:F6:C5:B8:BE:53:08:E5:E3:39:85:F0:85:E4: 38:09:3B:01:62:0C:1F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Dec 19 13:52:38.050 2025 GMT Extensions: 00:00:05:00:00:02:C0:1B Signature : ecdsa-with-SHA256 30:46:02:21:00:B9:BF:85:D7:DE:4A:35:A4:6E:F2:E8: 1B:14:9B:7D:F7:36:DB:41:96:C8:DE:A7:C1:B5:5E:10: B1:DC:AC:17:3D:02:21:00:E0:C4:EC:DE:61:28:09:77: EA:CD:47:8B:4F:67:AC:37:AD:D7:BB:1D:F8:43:46:D7: 94:B9:E2:04:3F:7B:45:DC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-08T16:18:12+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=CZ O=Alpiro s.r.o. CN=Alpiro RSA DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-03-27T00:00:00+00:00
Expires
2035-03-26T23:59:59+00:00
Days remaining
3091
Serial (hex)
A67257D189A20DAB43F01AF38A0337E0
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CD:FB:B4:78:82:81:8B:69:4A:AD:81:8C:D8:04:0D:D1:10:50:19:7F:51:DD:BF:3C:2E:B0:98:12:E4:A2:5D:F5
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
75:08:D4:F8:C8:8C:9B:B5:8A:52:E3:A6:8D:22:DE:CA:47:8B:B6:7D
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4120
Serial (hex)
D27FBBC1DE359E5216AD6149586099C4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →