DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

npx.cz · 2a01:5340:0:3805::29:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.npx.cz
Issuer
C=CZ O=Alpiro s.r.o. CN=Alpiro RSA DV SSL CA 2
Valid from
2026-10-12T00:00:00+00:00
Expires
2027-04-28T23:59:59+00:00
Days remaining
188
Serial (hex)
E2B73543623C1BFE74D8591C58DB4ABA
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.npx.cz, DNS:npx.cz

SHA-256 fingerprint

87:89:DC:4A:15:D5:A7:2C:9E:4A:68:BD:8D:3C:B1:50:96:13:50:B9:A6:10:AE:6B:65:15:B0:89:2C:D3:5E:20
Certificate extensions & PEM
authorityKeyIdentifier
75:08:D4:F8:C8:8C:9B:B5:8A:52:E3:A6:8D:22:DE:CA:47:8B:B6:7D
subjectKeyIdentifier
95:BC:30:C8:DF:B1:61:6E:49:A1:DD:6B:78:4C:C3:7D:C7:6A:5B:A0
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/AlpiroRSADVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.npx.cz, DNS:npx.cz
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Oct 12 06:38:02.170 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CE:84:DC:31:03:1F:3A:01:9A:1B:BD: 36:A1:8C:DD:3A:FC:D8:1A:89:07:C1:61:46:75:6C:55: B6:B1:04:19:FC:02:21:00:E9:4F:D9:6E:6F:FB:DD:B6: FF:D7:39:AE:00:17:62:BA:F9:99:26:8C:02:A4:2C:13: 78:D5:F2:30:33:89:63:B5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Oct 12 06:38:02.171 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:36:8C:A6:5D:9F:FE:00:1F:34:0A:D8:FF: 3D:3A:51:14:84:18:EC:46:16:A4:9C:EA:B6:76:D3:08: 08:0F:92:B6:02:21:00:E1:E8:E8:A8:2E:9A:31:97:48: 53:18:B7:90:DD:5A:E2:7A:87:B8:6F:76:36:B8:78:D7: B5:B7:B8:FA:6B:1E:AA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Oct 12 06:38:02.353 2026 GMT Extensions: 00:00:05:00:0B:86:A1:2B Signature : ecdsa-with-SHA256 30:46:02:21:00:EE:AE:3E:D3:5E:E8:BD:79:13:78:DB: CE:2D:F9:E7:0E:7C:E2:D4:5C:E9:B6:A2:E9:9B:8F:F6: A7:42:FF:DC:C2:02:21:00:F7:61:AD:4F:0B:C5:F8:E5: F6:D7:47:ED:88:2A:19:D1:5D:46:A5:F2:25:25:A9:B5: 72:DD:7A:85:33:A0:22:F7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-22T12:06:42+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=CZ O=Alpiro s.r.o. CN=Alpiro RSA DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-03-27T00:00:00+00:00
Expires
2035-03-26T23:59:59+00:00
Days remaining
3077
Serial (hex)
A67257D189A20DAB43F01AF38A0337E0
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CD:FB:B4:78:82:81:8B:69:4A:AD:81:8C:D8:04:0D:D1:10:50:19:7F:51:DD:BF:3C:2E:B0:98:12:E4:A2:5D:F5
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
75:08:D4:F8:C8:8C:9B:B5:8A:52:E3:A6:8D:22:DE:CA:47:8B:B6:7D
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4106
Serial (hex)
D27FBBC1DE359E5216AD6149586099C4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →