DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ns.cbws.be · 185.142.141.163:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=ns.cbws.nl
Issuer
C=US O=Let's Encrypt CN=E6
Valid from
2025-08-18T07:17:24+00:00
Expires
2025-11-16T07:17:23+00:00
Days remaining
-317
Serial (hex)
06A025761A017A63693B1F79971159E1BC90
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:ns.cbws.be, DNS:ns.cbws.fr, DNS:ns.cbws.nl

SHA-256 fingerprint

CE:5F:EC:81:7B:56:19:88:82:50:A4:1C:F1:E0:6F:87:2F:D6:11:10:39:2A:C1:24:CB:D6:7A:B4:86:0E:20:16
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
8D:2A:7D:05:63:78:BA:4A:DE:84:11:94:D5:E8:D5:E8:97:30:A5:EC
authorityKeyIdentifier
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
authorityInfoAccess
CA Issuers - URI:http://e6.i.lencr.org/
subjectAltName
DNS:ns.cbws.be, DNS:ns.cbws.fr, DNS:ns.cbws.nl
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://e6.c.lencr.org/17.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Aug 18 08:15:55.042 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DD:78:B4:A4:83:4E:23:0C:93:C6:8D: F9:E9:74:2F:B7:4E:34:74:CC:2C:E4:2E:CE:22:03:31: 93:95:9F:25:30:02:20:73:A1:67:CE:06:DE:31:2F:B2: 4C:8E:56:13:1C:FA:7E:44:FD:F9:B0:1C:BE:81:3A:5B: BF:13:95:6C:E5:B7:AA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A4:42:C5:06:49:60:61:54:8F:0F:D4:EA:9C:FB:7A:2D: 26:45:4D:87:A9:7F:2F:DF:45:59:F6:27:4F:3A:84:54 Timestamp : Aug 18 08:15:55.022 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2F:6A:A3:5D:44:CC:C0:64:C5:C5:75:4C: CB:7B:E4:97:14:F3:BE:C9:4B:70:03:BC:87:B0:A1:C3: 1B:39:50:84:02:21:00:B1:7A:D7:EE:E6:7D:69:D8:86: A9:45:32:52:43:BF:1F:E4:11:3E:1D:53:C8:C4:01:1B: 1C:9B:75:96:E0:C4:9C
-----BEGIN CERTIFICATE-----
MIIDtjCCAzygAwIBAgISBqAldhoBemNpOx95lxFZ4byQMAoGCCqGSM49BAMDMDIx
CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF
NjAeFw0yNTA4MTgwNzE3MjRaFw0yNTExMTYwNzE3MjNaMBUxEzARBgNVBAMTCm5z
LmNid3MubmwwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATp1xD0/O8Nel+zg2Lfc+hP
YEjNEGHFNZm4sQkydokHbQU7bniCTxekrCgrPeC4RLHjvfMbYrQCtZPmyLTS4V4W
+9Zo84KoniaCNDJXz2jZc6X3Q4jY+FpghsKnIcHUXp2jggIwMIICLDAOBgNVHQ8B
Af8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFI0qfQVjeLpK3oQRlNXo1eiXMKXsMB8GA1UdIwQYMBaA
FJMnRpgDqVFojpjWxEJI2yO/WJTSMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
AoYWaHR0cDovL2U2LmkubGVuY3Iub3JnLzAtBgNVHREEJjAkggpucy5jYndzLmJl
ggpucy5jYndzLmZyggpucy5jYndzLm5sMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0G
A1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9lNi5jLmxlbmNyLm9yZy8xNy5jcmwwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2Xjbap
flTA/kwNsAAAAZi8P86iAAAEAwBHMEUCIQDdeLSkg04jDJPGjfnpdC+3TjR0zCzk
Ls4iAzGTlZ8lMAIgc6FnzgbeMS+yTI5WExz6fkT9+bAcvoE6W78TlWzlt6oAdgCk
QsUGSWBhVI8P1Oqc+3otJkVNh6l/L99FWfYnTzqEVAAAAZi8P86OAAAEAwBHMEUC
IC9qo11EzMBkxcV1TMt75JcU877JS3ADvIewocMbOVCEAiEAsXrX7uZ9adiGqUUy
UkO/H+QRPh1TyMQBGxybdZbgxJwwCgYIKoZIzj0EAwMDaAAwZQIxANIvlD1AXn9K
hvr0UOIaM2RzcH/B/v2rO2k/b4XAO8Cz8o3HSASPtvfU4X7ExqGsogIwaYBR9eOK
mNZudZJcM1W9z1VKGPHHHjusPwLHi/DSkebtJISuGNctjBJchRxL+GjI
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-28T22:12:58+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=E6
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
165
Serial (hex)
B0573E9173972770DBB487CB3A452B38
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

76:E9:E2:88:AA:FC:0E:37:F4:39:0C:BF:94:6A:AD:99:7D:5C:1C:90:1B:3C:E5:13:D3:D8:FA:DB:AB:E2:AB:85
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →