DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nmail.nashnet.nu · 81.8.212.6:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed

Certificate verification failed

Subject
CN=nmail.nashnet.nu
Issuer
O=CAcert Inc. OU=http://www.CAcert.org CN=CAcert Class 3 Root
Valid from
2025-06-16T11:12:00+00:00
Expires
2027-06-16T11:12:00+00:00
Days remaining
216
Serial (hex)
031135
Signature
RSA-SHA512
Public key
RSA 2048

Subject alternative names (SAN)

DNS:nmail.nashnet.nu, othername:XmppAddr:nmail.nashnet.nu, DNS:imap.nashnet.nu, othername:XmppAddr:imap.nashnet.nu, DNS:pop.nashnet.nu, othername:XmppAddr:pop.nashnet.nu, DNS:smtp.nashnet.nu, othername:XmppAddr:smtp.nashnet.nu, DNS:mail.nashnet.nu, othername:XmppAddr:mail.nashnet.nu, DNS:imaps.nashnet.nu, othername:XmppAddr:imaps.nashnet.nu, DNS:pops.nashnet.nu, othername:XmppAddr:pops.nashnet.nu, DNS:pop3.nashnet.nu, othername:XmppAddr:pop3.nashnet.nu, DNS:maia.nashnet.nu, othername:XmppAddr:maia.nashnet.nu, DNS:smtps.nashnet.nu, othername:XmppAddr:smtps.nashnet.nu, DNS:pop3s.nashnet.nu, othername:XmppAddr:pop3s.nashnet.nu

SHA-256 fingerprint

97:25:9F:D0:B0:AC:4E:AC:89:F0:EF:A1:9F:E2:7A:06:B6:0B:6E:BA:39:E5:AA:87:04:35:9F:F2:74:DB:12:93
Certificate extensions & PEM
basicConstraints
CA:FALSE
keyUsage
Digital Signature, Key Encipherment, Key Agreement
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto
authorityInfoAccess
OCSP - URI:http://ocsp.cacert.org/
crlDistributionPoints
Full Name: URI:http://crl.cacert.org/class3-revoke.crl
subjectAltName
DNS:nmail.nashnet.nu, othername:XmppAddr:nmail.nashnet.nu, DNS:imap.nashnet.nu, othername:XmppAddr:imap.nashnet.nu, DNS:pop.nashnet.nu, othername:XmppAddr:pop.nashnet.nu, DNS:smtp.nashnet.nu, othername:XmppAddr:smtp.nashnet.nu, DNS:mail.nashnet.nu, othername:XmppAddr:mail.nashnet.nu, DNS:imaps.nashnet.nu, othername:XmppAddr:imaps.nashnet.nu, DNS:pops.nashnet.nu, othername:XmppAddr:pops.nashnet.nu, DNS:pop3.nashnet.nu, othername:XmppAddr:pop3.nashnet.nu, DNS:maia.nashnet.nu, othername:XmppAddr:maia.nashnet.nu, DNS:smtps.nashnet.nu, othername:XmppAddr:smtps.nashnet.nu, DNS:pop3s.nashnet.nu, othername:XmppAddr:pop3s.nashnet.nu
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-11-12T03:05:18+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
O=Root CA OU=http://www.cacert.org CN=CA Cert Signing Authority emailAddress=support@cacert.org
Issuer
O=Root CA OU=http://www.cacert.org CN=CA Cert Signing Authority emailAddress=support@cacert.org
Valid from
2003-03-30T12:29:49+00:00
Expires
2033-03-29T12:29:49+00:00
Days remaining
2329
Serial (hex)
0F
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

07:ED:BD:82:4A:49:88:CF:EF:42:15:DA:20:D4:8C:2B:41:D7:15:29:D7:C9:00:F5:70:92:6F:27:7C:C2:30:C5
Certificate extensions & PEM
subjectKeyIdentifier
16:B5:32:1B:D4:C7:F3:E0:E6:8E:F3:BD:D2:B0:3A:EE:B2:39:18:D1
basicConstraints
CA:TRUE
nsCaPolicyUrl
http://www.cacert.org/index.php?id=10
nsComment
To get your own certificate for FREE head over to http://www.cacert.org
crlDistributionPoints
Full Name: URI:http://crl.cacert.org/revoke.crl
nsCaRevocationUrl
URI:http://crl.cacert.org/revoke.crl
authorityInfoAccess
OCSP - URI:http://ocsp.cacert.org
authorityKeyIdentifier
16:B5:32:1B:D4:C7:F3:E0:E6:8E:F3:BD:D2:B0:3A:EE:B2:39:18:D1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
O=CAcert Inc. OU=http://www.CAcert.org CN=CAcert Class 3 Root
Issuer
O=Root CA OU=http://www.cacert.org CN=CA Cert Signing Authority emailAddress=support@cacert.org
Valid from
2021-04-19T12:18:30+00:00
Expires
2031-04-17T12:18:30+00:00
Days remaining
1617
Serial (hex)
14E228
Signature
RSA-SHA512
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1B:C5:A6:1A:2C:0C:01:32:C5:2B:28:4F:3D:A0:D8:DA:CF:71:7A:0F:6C:1D:DF:81:D8:0B:36:EE:E4:44:28:69
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityInfoAccess
OCSP - URI:http://ocsp.CAcert.org/ CA Issuers - URI:http://www.CAcert.org/class3.crt
certificatePolicies
Policy: 1.3.6.1.4.1.18506.2.3.1 CPS: http://www.CAcert.org/cps.php
crlDistributionPoints
Full Name: URI:https://www.cacert.org/class3.crl 
-----BEGIN CERTIFICATE-----
MIIGPTCCBCWgAwIBAgIDFOIoMA0GCSqGSIb3DQEBDQUAMHkxEDAOBgNVBAoTB1Jv
b3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ
Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9y
dEBjYWNlcnQub3JnMB4XDTIxMDQxOTEyMTgzMFoXDTMxMDQxNzEyMTgzMFowVDEU
MBIGA1UEChMLQ0FjZXJ0IEluYy4xHjAcBgNVBAsTFWh0dHA6Ly93d3cuQ0FjZXJ0
Lm9yZzEcMBoGA1UEAxMTQ0FjZXJ0IENsYXNzIDMgUm9vdDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKtJNRFIfNImflOUz0Op3SjXQiqL84d4GVh8D57a
iX3h++tykA10oZZkq5+gJJlz2uJVdscXe/UErEa4w75/ZI0QbCTzYZzA8pD6Ueb1
aQFjww9W4kpCz+JEjCUoqMV5CX1GuYrz6fM0KQhF5Byfy5QEHIGoFLOYZcRD7E6C
jQnRvapbjZLQ7N6QxX8KwuPr5jFaXnQ+lzNZ6MMDPWAzv/fRb0fEze5ig1JuLgia
pNkVGJGmhZJHsK5I6223IeyFGmhyNav/8BBdwPSUp2rVO5J+TJAFfpPBLIukjmJ0
FXFuC3ED6q8VOJrU0gVyb4z5K+taciX5OUbjchs+BMNkJyIQKopPWKcDrb60LhPt
XapI19V91Cp7XPpGBFDkzA5CW4zt2/LP/JaT4NsRNlRiNDiPDGCbO5dWOK3z0luL
oFvqTpa4fNfVoIZwQNORKbeiPK31jLvPGpKK5DR7wNhsX+kKwsOnIJpa3yxdUly6
R9Wb7yQocDggL9V/KcCyQQNokszgnMyXS0XvOhAKq3A6mJVwrTWx6oUrpByAITGp
rmB6gCZIALgBwJNjVSKRPFbnr9s6JfOPMVTqJouBWfmh0VMRxXudA/Z0EeBtsSw/
LIaRmXGapneLNGDRFLQsrJ2vjBDTn8Rq+G8T/HNZ92ZCdB6K4/jc0m+YnMtHmJVA
BfvpAgMBAAGjgfIwge8wDwYDVR0TAQH/BAUwAwEB/zBhBggrBgEFBQcBAQRVMFMw
IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLkNBY2VydC5vcmcvMCwGCCsGAQUFBzAC
hiBodHRwOi8vd3d3LkNBY2VydC5vcmcvY2xhc3MzLmNydDBFBgNVHSAEPjA8MDoG
CysGAQQBgZBKAgMBMCswKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cuQ0FjZXJ0Lm9y
Zy9jcHMucGhwMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHBzOi8vd3d3LmNhY2VydC5v
cmcvY2xhc3MzLmNybDANBgkqhkiG9w0BAQ0FAAOCAgEAxh6td1y0KJvRyI1EEsC9
dnYEgyEH+BGCf2vBlULAOBG1JXCNiwzB1Wz9HBoDfIv4BjGlnd5BKdSLm4TXPcE3
hnGjH1thKR5dd3278K25FRkTFOY1gP+mGbQ3hZRB6IjDX+CyBqS7+ECpHTms7eo/
mARN+Yz5R3lzUvXs3zSX+z534NzRg4i6iHNHWqakFcQNcA0PnksTB37vGD75pQGq
eSmx51L6UzrIpn+274mhsaFNL85jhX+lKuk71MGjzwoThbuZ15xmkITnZtRQs6Hh
LSIqJWjDILIrxLqYHehK71xYwrRNhFb3TrsWaEJskrhveM0Os/vvoLNkh/L3iEQ5
/LnmLMCYJNRALF7I7gsduAJNJrgKGMYvHkt1bo8uIXO8wgNV7qoU4JoaB1ML30QU
qGcFr0TI06FFdgK2fwy5hulPxm6wuxW0v+iAtXYx/mRkwQpYbcVQtrIDvx1CT1k5
0cQxi+jIKjkcFWHw3kBoDnCos0/ukegPT7aQnk2AbL4c7nCkuAcEKw1BAlSETkfq
i5btdlhh58MhewZv1LcL5zQyg8w1puclT3wXQvy8VwPGn0J/mGD4gLLZ9rGcHDUE
CokxFoWk+u5MCcVqmGbsyG4q5suS3CNslsHURfM8bQK4oLvHR8LCHEBMRcdFBn87
cSvOK6eB1kdGKLA8ymXxZp8=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →