THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

ns2.nette.pl · 193.138.118.6:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.nette.pl
Issuer
C=LV L=Riga O=GoGetSSL CN=GoGetSSL RSA DV CA
Valid from
2020-02-14T00:00:00+00:00
Expires
2022-05-18T00:00:00+00:00
Days remaining
-1604
Serial (hex)
30AA08747FE4C32DCF36D7143A00B0C8
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.nette.pl, DNS:nette.pl

SHA-256 fingerprint

33:B5:66:AC:FD:2A:7E:30:9A:E1:F0:04:6A:7D:A8:C4:0B:CE:73:77:07:A0:3A:B2:E5:30:8C:F1:78:78:7A:0E
Certificate extensions & PEM
authorityKeyIdentifier
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
subjectKeyIdentifier
A6:B2:4F:8B:9A:07:40:02:FF:7C:9C:70:AE:5B:74:3E:AB:80:48:A0
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.64 CPS: https://cps.usertrust.com Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/GoGetSSLRSADVCA.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/GoGetSSLRSADVCA.crt OCSP - URI:http://ocsp.usertrust.com
subjectAltName
DNS:*.nette.pl, DNS:nette.pl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D: 11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47 Timestamp : Feb 14 16:46:36.719 2020 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F4:44:85:62:FC:0E:8B:76:6E:2A:50: D4:28:D1:49:65:11:93:90:B8:47:BB:3F:1F:91:4D:48: 97:9B:34:3F:D9:02:20:3D:8B:F4:15:D9:2C:3C:BA:C4: F2:51:2E:5B:9A:A4:82:E3:32:0C:3C:A7:46:64:6D:9D: 7D:0B:BE:AF:72:6B:DD Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DF:A5:5E:AB:68:82:4F:1F:6C:AD:EE:B8:5F:4E:3E:5A: EA:CD:A2:12:A4:6A:5E:8E:3B:12:C0:20:44:5C:2A:73 Timestamp : Feb 14 16:46:36.794 2020 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:44:15:D4:E3:E7:0E:74:05:27:E4:D7:99: 7D:CB:60:09:53:88:4E:21:D5:8D:D7:35:36:C5:79:80: 4C:43:6A:B1:02:20:3F:36:EB:05:FA:AA:A7:22:5D:20: 3D:82:7D:A7:A2:E6:89:3A:D0:B8:6E:12:8E:C8:A7:4A: 08:98:2E:85:BF:4B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E: 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6 Timestamp : Feb 14 16:46:36.707 2020 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F5:30:C4:85:C5:55:5B:F6:FB:0A:7D: F3:94:CA:1E:A2:CD:90:CA:49:92:7F:25:FC:AF:09:AC: 3C:06:7D:B1:3D:02:21:00:EE:7D:E6:E1:5D:F7:D7:05: 29:CB:1A:4E:E2:EB:AC:34:4F:E0:F9:E7:7A:26:FB:48: 4B:A2:67:BD:AF:9D:5E:18 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77: 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13 Timestamp : Feb 14 16:46:36.992 2020 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A0:E5:86:5A:D8:E2:79:82:0F:83:45: 99:AB:50:4C:4F:5B:7B:0B:1D:38:29:27:A5:BC:83:65: 1F:21:8A:4E:F8:02:20:17:AF:3E:CC:9E:63:30:C1:99: 98:8A:BB:18:52:DD:A8:76:10:1B:03:24:B9:0B:9F:1C: 87:9F:9D:C1:85:49:07
-----BEGIN CERTIFICATE-----
MIIHhjCCBm6gAwIBAgIQMKoIdH/kwy3PNtcUOgCwyDANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJMVjENMAsGA1UEBxMEUmlnYTERMA8GA1UEChMIR29HZXRTU0wx
GzAZBgNVBAMTEkdvR2V0U1NMIFJTQSBEViBDQTAeFw0yMDAyMTQwMDAwMDBaFw0y
MjA1MTgwMDAwMDBaMBUxEzARBgNVBAMMCioubmV0dGUucGwwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDGsWEQ1sUoGEzhgqRrVHvMg9GxmghKedPYdovZ
hDGYcS0ju52N0ICxLIwYKjrGafn9Z+oVRISayZWd1HP8aTuhCTKkoI4l9sbFX/J8
nrmieIbeBvowr/AUU1RGjYZosfHODQ5pcHSXpjuKATRAwgvPoGzc43ehmCJozatO
NK4TY9vlNoH0sflEA5RWqtRMZN5nCaayYDw0G+U/Zcj9Yh4RHreU4jDz9i1fJiVQ
0aCpaYWHYns47UZrR92fGJEpo5yxzffSFpizE5ScRJi3cY/Nv3JNHjq6J2GE0i3t
QdUHAcWd516/Beh0lDm89vw98yO0pB2oC1jFqzDHZiFUns7b+eB03af17TMn9jEX
tIMHbOStLKryaaWvGDz++zu8sX8fbxqiWPR2E092sSd98WuUzRtH5xe3BEp3Z46T
zNP+LyeZcbOu9mRpDcOoC7fL+eQ6HIRieeTM6RXHz6jiCDoYjAq4/HJS+zfBK6Wn
i34xjOcBYRWw4YKeeiT8N5UZMpR9/B+ka9h1eV418RsoZN7UQL0Ngwf7ELmd9kpB
EtkeeihNaWmdlZN/rgjwDt0VsVMbb1mc2IYAMicyewXtYnxRuhSa3MrobIuNxbbO
qT3Xd6msPRQdBOE2BOHQu+M8AJpsLxie/jzL8xmwlLIic393ewgzssVDfDyJ+t3/
tLeR5QIDAQABo4IDmTCCA5UwHwYDVR0jBBgwFoAU+ftQxItnu2dk/oMhpqnOP1WE
k5kwHQYDVR0OBBYEFKayT4uaB0AC/3yccK5bdD6rgEigMA4GA1UdDwEB/wQEAwIF
oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBL
BgNVHSAERDBCMDYGCysGAQQBsjEBAgJAMCcwJQYIKwYBBQUHAgEWGWh0dHBzOi8v
Y3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMD0GA1UdHwQ2MDQwMqAwoC6GLGh0
dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9Hb0dldFNTTFJTQURWQ0EuY3JsMG8GCCsG
AQUFBwEBBGMwYTA4BggrBgEFBQcwAoYsaHR0cDovL2NydC51c2VydHJ1c3QuY29t
L0dvR2V0U1NMUlNBRFZDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz
ZXJ0cnVzdC5jb20wHwYDVR0RBBgwFoIKKi5uZXR0ZS5wbIIIbmV0dGUucGwwggH2
BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2AEalVet1+pEgMLWiiWn0830RLEF0vv1J
uIWr8vxw/m1HAAABcESYTK8AAAQDAEcwRQIhAPREhWL8Dot2bipQ1CjRSWURk5C4
R7s/H5FNSJebND/ZAiA9i/QV2Sw8usTyUS5bmqSC4zIMPKdGZG2dfQu+r3Jr3QB1
AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABcESYTPoAAAQDAEYw
RAIgRBXU4+cOdAUn5NeZfctgCVOITiHVjdc1NsV5gExDarECID826wX6qqciXSA9
gn2nouaJOtC4bhKOyKdKCJguhb9LAHcAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tL
x2jwkGKWBvYAAAFwRJhMowAABAMASDBGAiEA9TDEhcVVW/b7Cn3zlMoeos2QykmS
fyX8rwmsPAZ9sT0CIQDufebhXffXBSnLGk7i66w0T+D553om+0hLome9r51eGAB2
AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcESYTcAAAAQDAEcw
RQIhAKDlhlrY4nmCD4NFmatQTE9bewsdOCknpbyDZR8hik74AiAXrz7MnmMwwZmY
irsYUt2odhAbAyS5C58ch5+dwYVJBzANBgkqhkiG9w0BAQsFAAOCAQEAnkHzuehz
ZpWAcCtfHpCy7jkZVT1skCk/YCKtNUmgZ5NrLuLAEk4CZLQMBrAzoNoo1QsiEnuG
VSI5gaI1LeCqVa0+dFgWlqKN0ZO2fBjBjkCzbjnMvSxu+3uknxmiAv3HPev21OWo
pP4/iDrYUeJmIB7am+EUwxfZxxkVrzMc1UtyGmhYagaLD7fi5fn51oN1RCowDgvZ
Ua//ola/1wT2kfMB+wqTWy4cxY0eJcW2t7Scf9LOS5YToHy3hwkZgh28U4W06knO
2GICRkgT94nAbhjUVHSjq5fop+2eSAsLqzm37hZmWdjkxKzirKTMnlGKE6jwBBUv
RwJL7/Vci6ni3g==
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-10-07T07:50:24+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=LV L=Riga O=GoGetSSL CN=GoGetSSL RSA DV CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-09-06T00:00:00+00:00
Expires
2028-09-05T23:59:59+00:00
Days remaining
699
Serial (hex)
938BB08E62987B4F75F98CB6A5045C96
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

43:CA:C3:1E:F8:E8:BA:1B:4B:16:B8:20:6E:4C:0A:26:C5:BA:DB:2F:C3:AA:09:E9:01:70:E4:1B:66:C2:FD:64
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
F9:FB:50:C4:8B:67:BB:67:64:FE:83:21:A6:A9:CE:3F:55:84:93:99
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.64 Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=SE O=AddTrust AB OU=AddTrust External TTP Network CN=AddTrust External CA Root
Valid from
2000-05-30T10:48:38+00:00
Expires
2020-05-30T10:48:38+00:00
Days remaining
-2321
Serial (hex)
13EA28705BF4ECED0C36630980614336
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1A:51:74:98:0A:29:4A:52:8A:11:07:26:D5:85:56:50:26:6C:48:D9:88:3B:EA:69:2B:67:B6:D7:26:DA:98:C5
Certificate extensions & PEM
authorityKeyIdentifier
AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →