THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nmsu.edu · 216.21.13.176:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=New Mexico O=New Mexico State University CN=*.nmsu.edu
Issuer
C=US O=InCommon, LLC CN=InCommon RSA OV SSL CA 3
Valid from
2026-07-03T00:00:00+00:00
Expires
2027-01-17T23:59:59+00:00
Days remaining
75
Serial (hex)
010C4B54861B1BE11291F6789A012B28
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.nmsu.edu, DNS:nmsu.edu

SHA-256 fingerprint

24:E5:2F:44:18:BD:AE:61:D9:D2:D8:08:12:27:2E:B4:11:99:EF:04:94:7C:EA:D9:B9:B8:57:9A:E4:5A:12:A1
Certificate extensions & PEM
authorityKeyIdentifier
DA:22:37:3F:E5:D3:74:DA:D9:79:3E:D1:72:6D:D5:93:4B:20:37:AF
subjectKeyIdentifier
91:AA:0C:E4:63:B3:F2:E7:3B:2B:6E:80:31:8E:9F:03:9C:2D:81:8E
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonRSAOVSSLCA3.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonRSAOVSSLCA3.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 3 00:09:38.463 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E5:D2:68:80:66:AF:11:53:6D:4D:22: 55:56:33:F2:E1:D5:72:C2:11:48:97:23:73:4C:18:E5: 4C:75:B2:42:92:02:20:5D:D5:9C:35:E0:9A:47:E3:E0: 3A:94:84:28:AD:BF:CD:1C:FF:C0:3B:30:09:6E:C1:93: 76:BA:3D:63:DC:32:2E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jul 3 00:09:39.255 2026 GMT Extensions: 00:00:05:00:05:0F:92:AF Signature : ecdsa-with-SHA256 30:44:02:20:37:53:5C:8E:47:AD:0F:5F:57:8D:C7:96: A5:26:28:54:19:58:47:B9:0C:F1:71:63:C3:57:AC:E9: DA:1D:95:A8:02:20:06:57:E2:59:1F:BA:60:B7:C0:33: FB:95:C2:F4:CE:8B:96:7D:B7:E1:CA:44:0E:E2:54:70: 52:03:5C:A8:C1:87 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jul 3 00:09:38.631 2026 GMT Extensions: 00:00:05:00:00:44:27:58 Signature : ecdsa-with-SHA256 30:45:02:20:76:E9:49:F9:0F:99:FB:D6:CF:5B:C9:D8: 7A:EE:7C:E1:31:D7:D5:57:CF:1A:BF:8A:AB:FE:73:FA: C7:E6:7D:A5:02:21:00:C9:46:57:01:0A:A9:37:86:1B: C8:86:89:AF:9F:0C:71:FE:A5:73:C5:74:DD:C3:46:B4: 35:E8:11:D4:AF:20:95
subjectAltName
DNS:*.nmsu.edu, DNS:nmsu.edu
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-11-03T11:47:48+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=InCommon, LLC CN=InCommon RSA OV SSL CA 3
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-11-06T00:00:00+00:00
Expires
2035-11-05T23:59:59+00:00
Days remaining
3289
Serial (hex)
96B6DB3B0D5CB9BA5DDE8AAC8B6DFE77
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

9C:0F:28:8E:AA:BB:71:40:57:01:02:0C:97:2F:81:59:44:62:96:07:8D:38:59:1C:68:49:9B:12:CE:37:94:44
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
DA:22:37:3F:E5:D3:74:DA:D9:79:3E:D1:72:6D:D5:93:4B:20:37:AF
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →