DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nsu.edu · 204.155.176.137:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `nsu.edu'

Certificate verification failed

Subject
C=US ST=Virginia O=Norfolk State University CN=www.nsu.edu
Issuer
C=US O=InCommon, LLC CN=InCommon RSA OV SSL CA 3
Valid from
2026-05-31T00:00:00+00:00
Expires
2026-12-15T23:59:59+00:00
Days remaining
61
Serial (hex)
EEC0FA60CFE3D012611514A729CDC876
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.nsu.edu

SHA-256 fingerprint

0F:D0:73:30:4C:9D:A1:10:F2:80:67:DD:49:9A:F4:BC:B4:19:74:DC:EC:78:80:D1:53:A7:29:2E:84:62:AB:5A
Certificate extensions & PEM
authorityKeyIdentifier
DA:22:37:3F:E5:D3:74:DA:D9:79:3E:D1:72:6D:D5:93:4B:20:37:AF
subjectKeyIdentifier
EE:C3:60:96:AB:17:C6:5E:51:C1:63:43:CB:D2:CA:0E:B0:35:C3:B1
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonRSAOVSSLCA3.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonRSAOVSSLCA3.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:www.nsu.edu
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : May 31 00:18:27.124 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AC:9F:52:35:00:DF:D9:A7:DB:1C:73: FF:58:19:67:40:17:58:0E:33:BE:B7:C8:E2:60:F3:D7: C5:F7:F0:6E:F0:02:21:00:A5:CF:62:86:DC:38:6E:18: 64:F6:40:E9:68:C5:82:D3:68:EE:E5:E8:53:9C:29:36: 72:CD:6B:8C:94:C4:C0:17 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : May 31 00:18:27.290 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3A:31:71:FF:DC:C9:72:81:0C:D8:36:2D: F8:69:1D:04:5A:7B:B5:DD:09:9A:7E:4A:D5:E4:BD:54: C0:2E:E4:E0:02:21:00:91:7F:78:76:42:BF:1B:AE:68: 86:90:43:2A:CD:AE:54:02:5A:FA:23:0E:21:EF:F7:12: FB:37:2F:DC:3D:34:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : May 31 00:18:27.201 2026 GMT Extensions: 00:00:05:00:0E:2D:66:63 Signature : ecdsa-with-SHA256 30:45:02:21:00:CD:14:28:83:F6:E2:18:EF:C4:A9:82: C7:8E:60:26:6A:19:A0:F1:5C:E5:E3:B0:F4:36:4D:70: 02:4B:42:0E:7E:02:20:71:02:AA:78:A9:91:6D:E7:0F: 1A:83:A5:8F:51:96:87:93:FA:3F:37:E8:B1:49:55:67: 58:BD:05:4D:66:B1:A6
-----BEGIN CERTIFICATE-----
MIIGjzCCBPegAwIBAgIRAO7A+mDP49ASYRUUpynNyHYwDQYJKoZIhvcNAQELBQAw
SDELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUluQ29tbW9uLCBMTEMxITAfBgNVBAMT
GEluQ29tbW9uIFJTQSBPViBTU0wgQ0EgMzAeFw0yNjA1MzEwMDAwMDBaFw0yNjEy
MTUyMzU5NTlaMFkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhWaXJnaW5pYTEhMB8G
A1UEChMYTm9yZm9sayBTdGF0ZSBVbml2ZXJzaXR5MRQwEgYDVQQDEwt3d3cubnN1
LmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGgAroOgOKOL/Q/
tT23+eqiq57vlyGQvuAdv46CZaiPCwM184SFMu+h90lveX3D904MUmpZG12MC7JS
psY1B5vZ5x/B35XleTfCvG9M7Brq+gsSnxR57Tk0SXuoIEYsG525fNAkc4hp93Mf
vx8dBaiqx/TNM0U1YeVh9ieoXdrtZ+7/WPdfMbWw19I9E3KAIkSQJyP131rcZE6u
BVd+cY0yqhVdbGdTqdQoTvebXHfiRFU/Rl24GVnAfDIIH8xlIegvE10w4fx2k5VX
Z0/0a90F5BO0wM76hNNeg09wiZRP0eWUczMSRm+5YCpkKr8Q5uM6WPM9Nxk4vTna
9+gBSrcCAwEAAaOCAuEwggLdMB8GA1UdIwQYMBaAFNoiNz/l03Ta2Xk+0XJt1ZNL
IDevMB0GA1UdDgQWBBTuw2CWqxfGXlHBY0PL0soOsDXDsTAOBgNVHQ8BAf8EBAMC
BaAwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDATATBgNVHSAEDDAK
MAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLnNlY3RpZ28u
Y29tL0luQ29tbW9uUlNBT1ZTU0xDQTMuY3JsMG8GCCsGAQUFBwEBBGMwYTA6Bggr
BgEFBQcwAoYuaHR0cDovL2NydC5zZWN0aWdvLmNvbS9JbkNvbW1vblJTQU9WU1NM
Q0EzLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wFgYD
VR0RBA8wDYILd3d3Lm5zdS5lZHUwggGHBgorBgEEAdZ5AgQCBIIBdwSCAXMBcQB3
ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABnntldLQAAAQDAEgw
RgIhAKyfUjUA39mn2xxz/1gZZ0AXWA4zvrfI4mDz18X38G7wAiEApc9ihtw4bhhk
9kDpaMWC02ju5ehTnCk2cs1rjJTEwBcAdgDIo8R/x7OtuTVrAT9qehJt4zpOQ6XG
RvmXrTl1mR3PmgAAAZ57ZXVaAAAEAwBHMEUCIDoxcf/cyXKBDNg2LfhpHQRae7Xd
CZp+StXkvVTALuTgAiEAkX94dkK/G65ohpBDKs2uVAJa+iMOIe/3Evs3L9w9NJ0A
fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ57ZXUBAAgAAAUA
Di1mYwQDAEcwRQIhAM0UKIP24hjvxKmCx45gJmoZoPFc5eOw9DZNcAJLQg5+AiBx
Aqp4qZFt5w8ag6WPUZaHk/o/N+ixSVVnWL0FTWaxpjANBgkqhkiG9w0BAQsFAAOC
AYEAAddN1DZgtk/OReTTrDnKRxkfyOqT7kvCNTDP1WsjHUNM9OnTg370Tm8EKKQj
nPEA1vipF08J+oS252FCtLsGyRNQJFgOcMqwOuprHQka6N/74SxkkQXSKJCj9XMv
ChxF4gik1SyWeJN9EOhnNJpI+Zg6xi6jF/CIkYCmA1V4oPZDb01+3eegf0YqmHaF
sfmNHTZqaYKyMXNTtg/D940Pce26o26iniuTXkiEhoy3qBZEVtHBIu4zNVdLXG36
Ce8HBRRG1ImN3P2gI4Dpd5AdKcp5FnLeLm2fPbkrqoPBRB2ebknTK9ZC8yteUgo8
fGchaBvQLE3OVEfvHtH8W1u2JgS9xYBNT6L6mVhQ4+cWa1X9A8Nh+ySeH65HcoZ3
eiyRXdv+hzlyZ8N0Ku5gVIuyWw8DPcvRBelF88hJ9XoTNoQMTbkeGZubtWVqRpss
T8D8vpMd0X4eDCfJFdbczEUltZGH6mVhbjtUELtLnejPthYMGZRD0kkL4YoIUDkk
5w0J
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-15T03:34:30+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=InCommon, LLC CN=InCommon RSA OV SSL CA 3
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-11-06T00:00:00+00:00
Expires
2035-11-05T23:59:59+00:00
Days remaining
3308
Serial (hex)
96B6DB3B0D5CB9BA5DDE8AAC8B6DFE77
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

9C:0F:28:8E:AA:BB:71:40:57:01:02:0C:97:2F:81:59:44:62:96:07:8D:38:59:1C:68:49:9B:12:CE:37:94:44
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
DA:22:37:3F:E5:D3:74:DA:D9:79:3E:D1:72:6D:D5:93:4B:20:37:AF
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →