DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

ns2.canadiandomain.ca · 207.253.227.212:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.zid.com
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2025-05-20T00:00:00+00:00
Expires
2026-06-19T23:59:59+00:00
Days remaining
-121
Serial (hex)
038E731D64FFDE9AD6B44676A13C104C
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.zid.com, DNS:zid.com

SHA-256 fingerprint

C5:F1:EC:3D:2F:79:05:3A:9F:A7:78:59:D0:0C:FE:95:51:04:CC:55:5E:77:4D:62:B8:19:C4:83:EC:4E:3C:51
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
0B:B7:BE:1D:41:7C:73:1D:DB:E1:68:EB:BF:56:73:D2:92:20:FA:B5
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.zid.com, DNS:zid.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : May 20 15:39:05.490 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:31:19:78:F3:3A:B8:35:90:63:36:4A:D6: FF:C2:DA:AB:02:91:73:79:DD:29:0F:89:7B:72:77:71: CB:45:FD:BA:02:21:00:8C:23:11:81:D0:9D:25:08:18: 46:08:02:FC:55:7B:9B:93:12:C7:07:EE:AE:34:D6:40: 23:7A:E1:74:5F:3D:A4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91: AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4 Timestamp : May 20 15:39:05.416 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3A:FA:84:E5:AA:39:2F:59:46:3D:BE:9B: F9:17:91:3D:2F:F7:B4:6D:7F:E7:4F:F2:8C:14:0B:35: 6A:82:E3:E5:02:20:3D:17:C0:01:D2:80:E5:DC:46:B9: AC:50:23:4D:F3:12:AD:C2:0D:E7:31:E0:8E:66:4D:AD: 8A:99:51:50:B7:00 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90: DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21 Timestamp : May 20 15:39:05.376 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:EF:E6:15:77:AF:36:F1:48:15:01:17: 0F:A7:0B:75:39:12:AF:4F:94:22:78:3B:F4:7D:53:EF: 0B:38:DC:A8:E6:02:21:00:DE:9D:0E:8C:2C:BB:40:FD: 2C:4E:BD:2E:8B:82:7E:3A:56:7E:C5:B9:38:BF:DE:90: CE:CB:DA:A3:DF:CA:EC:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-SHA384 · Checked 2026-10-18T00:00:27+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1535
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
805
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →