THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ns3.sd62.bc.ca · 13.88.237.238:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.sd62.bc.ca
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Valid from
2024-04-03T00:00:00+00:00
Expires
2025-05-04T23:59:59+00:00
Days remaining
-511
Serial (hex)
07603EA73109929D40C425F22BFBC06C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.sd62.bc.ca, DNS:sd62.bc.ca

SHA-256 fingerprint

C7:60:CD:F2:05:6F:5E:B8:24:C9:C5:D3:25:AB:B8:47:A4:FF:A8:24:E9:CB:E6:83:AE:A1:AD:63:28:9A:60:06
Certificate extensions & PEM
authorityKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
subjectKeyIdentifier
1B:EB:92:0C:C5:03:9D:05:1E:F0:1B:27:1D:E6:65:84:7B:AB:37:CC
subjectAltName
DNS:*.sd62.bc.ca, DNS:sd62.bc.ca
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB: 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF Timestamp : Apr 3 20:42:05.114 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2C:20:04:6C:60:5F:34:B7:BC:34:3F:3E: 36:B6:03:03:11:AE:2E:30:61:8A:91:8C:1D:27:4D:06: E4:24:3F:5C:02:20:6C:7F:F3:56:C5:4B:AC:9C:60:CB: 30:17:3C:1C:17:42:7F:67:D8:79:51:37:96:4C:10:7B: 3C:86:E5:E8:8A:A3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : Apr 3 20:42:05.054 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:56:63:1A:AB:B0:18:58:FE:36:3D:5A:8F: AF:66:13:8E:E1:3F:3E:80:B8:CC:8B:BA:F8:54:10:CB: 72:39:AE:5F:02:21:00:87:8B:D4:5B:7A:1B:46:E7:79: 29:3E:65:AC:38:4E:01:4E:D4:46:D1:7F:2E:DA:3C:5A: 7E:51:55:31:10:8F:E5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Apr 3 20:42:05.094 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DB:10:64:A5:BD:DC:AE:0E:FC:F1:D7: D1:49:D6:55:98:49:DA:6A:CA:53:65:00:1A:FF:39:A4: BF:9E:F7:DE:64:02:21:00:D1:A0:05:EB:75:57:80:29: F0:69:85:75:8B:8C:60:9C:4C:71:DF:3A:31:93:96:66: 83:79:7C:57:FB:38:24:D2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-27T21:09:12+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:23:37+00:00
Expires
2027-11-02T12:23:37+00:00
Days remaining
400
Serial (hex)
0D07782A133FC6F9A57296E131FFD179
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
Certificate extensions & PEM
subjectKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →