DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ns1.whs.ee · 185.155.99.64:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=ns1.whs.ee
Issuer
C=US O=Let's Encrypt CN=R13
Valid from
2026-05-02T18:47:54+00:00
Expires
2026-07-31T18:47:53+00:00
Days remaining
-96
Serial (hex)
05FB5FBD69E856432D4E0F40C0850E0856EF
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:ns1.whs.ee

SHA-256 fingerprint

9D:6C:BE:52:18:45:4C:3E:3D:FD:96:8A:B0:32:A8:92:EE:06:7C:81:3C:BC:01:D3:23:52:7B:AD:FD:8C:01:59
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
FF:C0:59:33:61:5A:96:0E:2E:17:48:0E:00:64:3F:48:64:2C:FC:55
authorityKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityInfoAccess
CA Issuers - URI:http://r13.i.lencr.org/
subjectAltName
DNS:ns1.whs.ee
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r13.c.lencr.org/112.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : May 2 19:46:24.335 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:57:F1:0D:87:12:D6:A3:B9:38:C6:FD:75: 88:C0:28:14:E0:A5:05:F5:21:C8:F4:B8:E2:B0:5F:B3: C2:9E:08:0B:02:21:00:C9:38:18:A0:2F:74:39:B1:4B: F6:3F:37:08:CB:79:0C:07:8B:14:95:48:7D:CC:11:64: 6A:8A:C3:0B:7C:37:4F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19: D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27 Timestamp : May 2 19:46:24.497 2026 GMT Extensions: 00:00:05:00:09:4A:82:89 Signature : ecdsa-with-SHA256 30:45:02:20:34:22:11:01:B4:85:B1:02:79:80:EE:24: B1:EC:D3:A3:DD:AD:FD:48:AD:7D:D6:50:38:09:42:A2: 57:8A:0B:3E:02:21:00:D2:DE:3C:7F:32:B0:01:B3:79: 2A:CE:73:8B:8D:B9:74:3D:EE:19:02:88:9F:0E:AB:5A: CE:D4:1A:46:CF:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-04T12:07:37+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R13
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
128
Serial (hex)
5A00F212D8D4B480F3924157EA298305
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

D3:B1:28:21:6A:84:3F:8E:F1:32:15:01:F5:DF:52:A5:DF:52:93:9E:E2:C1:92:97:71:2C:D3:DE:4D:41:93:54
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →