DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nusa.net.id · 43.230.131.153:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=nusa.net.id
Issuer
C=US O=Google Trust Services CN=WR1
Valid from
2026-09-08T05:28:27+00:00
Expires
2026-12-07T05:28:26+00:00
Days remaining
29
Serial (hex)
F264E4A6DE82F74F0E9FD32BB9205F0C
Signature
RSA-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:nusa.net.id, DNS:*.nusa.net.id

SHA-256 fingerprint

4F:A4:E5:35:41:0D:02:3A:41:FE:68:70:E5:64:B3:28:43:F1:96:82:36:DA:1A:6B:A8:FB:6F:D7:4A:31:6A:11
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
55:D0:12:33:56:66:B0:95:6D:86:18:86:22:3C:B3:CA:FA:7D:7F:0C
authorityKeyIdentifier
66:69:49:D4:DE:2A:9C:91:03:CF:89:0E:24:B8:0E:30:03:6E:88:2E
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/wr1.crt
subjectAltName
DNS:nusa.net.id, DNS:*.nusa.net.id
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://c.pki.goog/wr1/sAC-DJRrPnI.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 8 06:28:28.476 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:EE:CA:3D:E9:53:FF:BD:B5:39:A7:5C: ED:BA:81:93:7A:E5:BE:2C:6F:CC:B2:A0:AF:B5:8F:64: E1:D4:77:C2:5E:02:20:4F:E3:7C:BF:46:22:CF:71:A7: FC:C3:5E:B8:35:D9:8F:B0:76:7B:5B:58:7B:08:0A:B1: AC:13:78:E7:5B:58:C2 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 74:DB:9D:58:F7:D4:7E:9D:FD:78:7A:16:2A:99:1C:18: CF:69:8D:A7:C7:29:91:8C:9A:18:B0:45:0D:BA:44:BC Timestamp : Sep 8 06:28:29.614 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:92:D4:5A:C8:4B:A8:06:31:EF:DB:16: 2F:94:BD:A2:E0:3A:3A:BF:A6:42:36:28:8A:F1:52:FE: B8:39:03:7B:CD:02:20:40:40:27:DE:E9:2F:8D:C8:8F: 40:D2:89:9C:D7:6C:EF:CB:11:7B:5D:FD:14:A4:0B:9B: B7:AC:83:57:34:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-ECDSA-AES128-GCM-SHA256 · Checked 2026-11-07T17:09:36+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Google Trust Services CN=WR1
Issuer
C=US O=Google Trust Services LLC CN=GTS Root R1
Valid from
2023-12-13T09:00:00+00:00
Expires
2029-02-20T14:00:00+00:00
Days remaining
835
Serial (hex)
7FD9E2C2D2048A0474B627A26D0868A7
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B1:0B:6F:00:E6:09:50:9E:87:00:F6:D3:46:87:A2:BF:CE:38:EA:05:A8:FD:F1:CD:C4:0C:3A:2A:0D:0D:0E:45
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
66:69:49:D4:DE:2A:9C:91:03:CF:89:0E:24:B8:0E:30:03:6E:88:2E
authorityKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/r1.crt
crlDistributionPoints
Full Name: URI:http://c.pki.goog/r/r1.crl
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----
MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw
MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl
cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI
uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT
wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV
76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy
PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y
KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/
AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk
rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG
GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw
Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq
hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+
3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA
JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u
HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6
N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv
xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn
lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17
ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+
PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA
f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf
IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Google Trust Services LLC CN=GTS Root R1
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2020-06-19T00:00:42+00:00
Expires
2028-01-28T00:00:42+00:00
Days remaining
446
Serial (hex)
77BD0D6CDB36F91AEA210FC4F058D30D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

3E:E0:27:8D:F7:1F:A3:C1:25:C4:CD:48:7F:01:D7:74:69:4E:6F:C5:7E:0C:D9:4C:24:EF:D7:69:13:39:18:E5
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.pki.goog/gsr1 CA Issuers - URI:http://pki.goog/gsr1/gsr1.crt
crlDistributionPoints
Full Name: URI:http://crl.pki.goog/gsr1/gsr1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.11129.2.5.3.2 Policy: 1.3.6.1.4.1.11129.2.5.3.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →