DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nour.net · 192.250.239.122:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.alfaristours.com
Issuer
C=US O=Let's Encrypt CN=R13
Valid from
2025-10-01T23:15:04+00:00
Expires
2025-12-30T23:15:03+00:00
Days remaining
-286
Serial (hex)
0516ADC8079917F57890DC7AC918236D04C8
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.alfaristours.com, DNS:alfaristours.com

SHA-256 fingerprint

A8:BD:ED:FD:24:E4:CB:87:B1:A4:AE:7F:F7:11:0D:CB:ED:5F:A4:BD:DD:FB:FF:60:7B:19:D2:C0:17:48:6A:00
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
A7:C0:66:3C:C8:B4:23:67:C3:D6:33:49:1A:D3:0F:07:2C:35:20:D2
authorityKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityInfoAccess
CA Issuers - URI:http://r13.i.lencr.org/
subjectAltName
DNS:*.alfaristours.com, DNS:alfaristours.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r13.c.lencr.org/73.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A4:42:C5:06:49:60:61:54:8F:0F:D4:EA:9C:FB:7A:2D: 26:45:4D:87:A9:7F:2F:DF:45:59:F6:27:4F:3A:84:54 Timestamp : Oct 2 00:13:34.813 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:36:1A:D0:99:5C:28:F7:7E:28:65:9F:C2: 2E:55:FF:D3:94:24:45:50:01:5E:93:A3:A7:50:7D:82: FE:83:FB:C0:02:21:00:AA:1C:9E:C8:98:97:6D:E9:00: 4E:16:62:AA:5C:53:16:45:78:EE:C1:9B:51:A4:9B:32: 3C:D9:BD:86:FC:10:0F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91: AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4 Timestamp : Oct 2 00:13:34.816 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F7:13:20:4E:65:18:F0:10:A8:FD:3C: A4:45:F9:B5:AB:A2:45:78:7C:7E:50:F1:29:84:C2:E2: 48:EA:91:5F:08:02:21:00:E1:13:8A:C8:B8:62:9B:D9: 82:01:21:69:E5:95:46:D1:48:82:79:70:31:4C:F4:5B: A5:3A:02:34:89:49:3D:9C
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISBRatyAeZF/V4kNx6yRgjbQTIMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjUxMDAxMjMxNTA0WhcNMjUxMjMwMjMxNTAzWjAdMRswGQYDVQQD
DBIqLmFsZmFyaXN0b3Vycy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIsdw+EhExwy10EVQDGB1HkgOfCkLpfQMfV/65Qaxdf8Fo3oE/R/Vk/JUf
Z4470RT/lJJzrrWK+6kC+6rjRFNwIE6N+FcJCvZHIpmTHJcyI4w0tvsdOBiPFjyW
QML6O1WKodQWAD/KL0EX/6sSDQASBVDF5LDbxP99mKz8OzFuPt8xdlCRLuk7GP3i
jakz0ncSyGJt5rCMJm/y3ofjytBTiPuOIKwfD3Nz8TViacHoLg89PN9rp+h7g0Ll
1ksQxjpYm95CwcKZ92IcRdTlptf22mR2GuRUDxLVd3HErhvrWn5/uZBfTUaqVWME
IrqIZ+IBdfMNFNvyqniqaqWSI5IrAgMBAAGjggI1MIICMTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFKfAZjzItCNnw9YzSRrTDwcsNSDSMB8GA1UdIwQYMBaAFOernw8s
M6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0
cDovL3IxMy5pLmxlbmNyLm9yZy8wLwYDVR0RBCgwJoISKi5hbGZhcmlzdG91cnMu
Y29tghBhbGZhcmlzdG91cnMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1Ud
HwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvNzMuY3JsMIIBBQYK
KwYBBAHWeQIEAgSB9gSB8wDxAHYApELFBklgYVSPD9TqnPt6LSZFTYepfy/fRVn2
J086hFQAAAGZokRi3QAABAMARzBFAiA2GtCZXCj3fihln8IuVf/TlCRFUAFek6On
UH2C/oP7wAIhAKocnsiYl23pAE4WYqpcUxZFeO7Bm1GkmzI82b2G/BAPAHcAGYbU
xyiqb/66A294Kk0BkarOLXIxD67OXXBBLSVMx9QAAAGZokRi4AAABAMASDBGAiEA
9xMgTmUY8BCo/TykRfm1q6JFeHx+UPEphMLiSOqRXwgCIQDhE4rIuGKb2YIBIWnl
lUbRSIJ5cDFM9FulOgI0iUk9nDANBgkqhkiG9w0BAQsFAAOCAQEAb/0nEY9x7G6b
6b9OGWeJe+Kc0QE5gf1w+xvs24ptMnjgfW9PeKPc5ihtcriDS6Sc7hSFcwE94eka
ZTM4LVgBTRVX2X/CGvN55q9qBv2u51S/M4OsoxMNx/mbo0mdMn4wcXtPj17Bqt2o
mamcle+5OG5gO24o50lNDxPh2JjJUjHaDEFhnxAGn0atM0QAdFIQB1QpvV9QqC6+
P8tSwq9SEHS5kT5gCY+XEaZriqSo3MUycubQKd4717S0Ufk51h6IiAWxNKkXs8D0
UkQ4uSYjkRSLeSNloVnET4WPbc2+WZByxrZFFS+TXCIx7uxQ52ddydwNpne2Y5Nz
mkGZt44/Pg==
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-12T13:31:02+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R13
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
151
Serial (hex)
5A00F212D8D4B480F3924157EA298305
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

D3:B1:28:21:6A:84:3F:8E:F1:32:15:01:F5:DF:52:A5:DF:52:93:9E:E2:C1:92:97:71:2C:D3:DE:4D:41:93:54
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →