DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

npcn.net.pk · 66.45.245.11:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=www.npcn.net.pk
Issuer
C=US O=Let's Encrypt CN=R13
Valid from
2026-03-20T19:00:06+00:00
Expires
2026-06-18T19:00:05+00:00
Days remaining
-106
Serial (hex)
05968C7AB94FD8A50EFE5FB6465F2F397A37
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.logs1.npcn.com.pk, DNS:*.npcn.com.pk, DNS:mail.npcn.net.pk, DNS:npcn.com.pk, DNS:npcn.net.pk, DNS:www.npcn.net.pk

SHA-256 fingerprint

00:05:34:73:16:40:CA:DE:CB:73:06:E0:F6:EE:8C:1D:B7:3F:B2:6B:25:02:93:F8:C3:4E:1A:B2:9A:2E:7D:45
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
A5:64:91:7F:BE:EA:D4:91:24:2E:96:C5:D1:6E:24:C8:29:18:03:A7
authorityKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityInfoAccess
CA Issuers - URI:http://r13.i.lencr.org/
subjectAltName
DNS:*.logs1.npcn.com.pk, DNS:*.npcn.com.pk, DNS:mail.npcn.net.pk, DNS:npcn.com.pk, DNS:npcn.net.pk, DNS:www.npcn.net.pk
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r13.c.lencr.org/56.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Mar 20 19:58:36.756 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A2:5B:62:52:0C:90:10:14:17:53:95: 04:DB:DA:B9:DF:C5:45:25:66:A4:FC:1D:CF:C7:39:58: 27:BE:84:A2:4E:02:20:6D:F8:74:60:A7:1A:CF:15:4E: 19:DD:3B:56:66:4D:BF:98:D9:DB:1F:76:1F:55:FF:6E: BC:8F:22:44:4E:C3:F4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Mar 20 19:58:38.778 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8D:A8:E1:20:7C:B4:EB:4D:3C:BD:BD: 06:53:44:69:85:9B:2D:E4:A0:89:BD:7D:4D:77:03:82: 71:7E:DE:8D:DC:02:21:00:E3:31:61:F3:26:39:73:C9: D1:60:A6:EF:03:FF:62:10:3A:60:96:81:72:FF:74:EC: ED:98:D9:44:96:DE:4B:5C
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISBZaMerlP2KUO/l+2Rl8vOXo3MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwMzIwMTkwMDA2WhcNMjYwNjE4MTkwMDA1WjAaMRgwFgYDVQQD
Ew93d3cubnBjbi5uZXQucGswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDREFa5zeVBc61BUSqqBlwtt2OMqvVMGfngvvyls4RB3m9sdOs5MXVrNQOmyjcg
8gpR4dVDc7oo7YMdgnF6yqFGGJFE1FTMqmERwG384KYOwZpTyeLtGZ4xokJZxo5p
K6T9Bcq9cyA/JT21vkF1Rw6Ei+xitxV/2bWIEyyuT6ZQfcz3v0Qebn436kURnRQs
zE5i17IWeKrsaJJY1mPr7YT1zY85NVv9Be4pf/dCAo+yh+49yfWAC7Ee5PnGIDHW
Tvj7pFy9cyhoDeVWbSAAOaZQx5jYxVxh8dCG1p1DWqblQmFEFBJotBsoLPETN8Ze
TUYENC3bYCEuYCJSl5CfadBbAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAw
EwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUpWSR
f77q1JEkLpbF0W4kyCkYA6cwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvW
kjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVu
Y3Iub3JnLzBqBgNVHREEYzBhghMqLmxvZ3MxLm5wY24uY29tLnBrgg0qLm5wY24u
Y29tLnBrghBtYWlsLm5wY24ubmV0LnBrggtucGNuLmNvbS5wa4ILbnBjbi5uZXQu
cGuCD3d3dy5ucGNuLm5ldC5wazATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E
JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzU2LmNybDCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB2AEmcm2neHXzs/DbezYdkprhbrwqHgBnRVVL76esp
3fjDAAABnQzUDNQAAAQDAEcwRQIhAKJbYlIMkBAUF1OVBNvaud/FRSVmpPwdz8c5
WCe+hKJOAiBt+HRgpxrPFU4Z3TtWZk2/mNnbH3YfVf9uvI8iRE7D9AB3AMs49xWJ
fIShRF9bwd37yW7ymlnNRwppBYWwyxTDFFjnAAABnQzUFLoAAAQDAEgwRgIhAI2o
4SB8tOtNPL29BlNEaYWbLeSgib19TXcDgnF+3o3cAiEA4zFh8yY5c8nRYKbvA/9i
EDpgloFy/3Ts7ZjZRJbeS1wwDQYJKoZIhvcNAQELBQADggEBAD3dZp7isae84JTN
Rw0UKgjUxOIBWYoxuDcrJbmITgm6r3TW3BwwWPxTHEX+ZIcdJdlNs1WXWjdEt5wG
nY9c/RIUW9JVvEjrE03ALURrP1xirONh4lmyoT1vQRpF1YeSDpmY0NvcsFT8faA6
2NqnO8+5Eo+0g5IIitQvBydJjePj8r/9NpH7vADDPZEhH9GKPIrlaRsuN/yXgIBv
5ktvp7x/vM2zO4babn57B/aSf1tFYS/rHgNjoamfx6rgGgX6jqeLvqpF69q2YBbs
bxN8vqxJQV7SiIvd5a2bq73w3e6g3UCyxQmdFmqE1uNdxDFtyXyt3hwDGef0o+g+
J6EFiMU=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-02T12:21:11+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R13
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
161
Serial (hex)
5A00F212D8D4B480F3924157EA298305
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

D3:B1:28:21:6A:84:3F:8E:F1:32:15:01:F5:DF:52:A5:DF:52:93:9E:E2:C1:92:97:71:2C:D3:DE:4D:41:93:54
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →