DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ns3.contato.net · 201.76.0.20:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=ararangua.net
Issuer
C=US O=Let's Encrypt CN=R11
Valid from
2025-03-27T23:34:26+00:00
Expires
2025-06-25T23:34:25+00:00
Days remaining
-483
Serial (hex)
06FF5DE358A13A3D7E19DF3B5013D5D3AFA6
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.ararangua.net, DNS:ararangua.net

SHA-256 fingerprint

0A:03:A0:9B:27:D2:F6:F6:42:97:84:D1:B3:88:9E:8C:4F:AE:72:58:83:75:93:AC:B5:47:ED:FA:0C:4F:52:48
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
80:86:BB:8E:D4:F6:A0:37:8A:00:FF:B0:7F:06:63:C3:B9:CA:EF:80
authorityKeyIdentifier
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
OCSP - URI:http://r11.o.lencr.org CA Issuers - URI:http://r11.i.lencr.org/
subjectAltName
DNS:*.ararangua.net, DNS:ararangua.net
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r11.c.lencr.org/39.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Mar 28 00:32:56.858 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:70:91:8B:5E:5D:A3:87:42:0D:6E:99:04: A5:09:28:A2:40:2A:96:D4:03:4F:DF:08:B7:47:E6:08: DE:21:E5:18:02:21:00:BB:E3:2D:EA:4F:11:CD:02:F2: F0:50:22:72:03:CE:48:EC:FF:5A:86:3D:FD:CC:3E:0A: 86:AD:DA:49:F0:0C:4F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Mar 28 00:32:58.852 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:99:4B:9C:C1:9D:68:55:7B:31:DF:B0: 7D:DC:54:71:40:41:1F:08:5E:C6:F4:12:1E:67:6C:FB: 00:F9:D2:17:D9:02:20:48:45:A0:84:06:71:0D:EB:4A: FA:F7:FF:6D:5C:7D:9A:4C:73:7F:09:6A:75:8B:22:56: 91:5F:C3:94:84:A0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-21T04:32:19+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R11
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
142
Serial (hex)
8A7D3E13D62F30EF2386BD29076B34F8
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

59:1E:9C:E6:C8:63:D3:A0:79:E9:FA:BE:14:78:C7:33:9A:26:B2:12:69:DD:E7:95:21:13:61:02:4A:E3:1A:44
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →