DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nw.ru · 82.179.39.21:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=rokson.spbrc.ru
Issuer
C=US O=Let's Encrypt CN=R3
Valid from
2022-10-20T11:26:02+00:00
Expires
2023-01-18T11:26:01+00:00
Days remaining
-1367
Serial (hex)
0326F0D98E017D7533DD27566DE1E6A2D5B9
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:rokson.spbrc.ru

SHA-256 fingerprint

38:B6:83:A4:D7:58:09:3F:31:5B:04:A4:71:23:A9:4F:A9:28:90:88:A7:84:B9:63:97:EF:7B:92:BD:A4:E9:FB
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
26:F3:B5:62:54:A7:90:C3:D4:2E:17:D1:B5:B9:4E:6A:E0:BB:72:E3
authorityKeyIdentifier
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
OCSP - URI:http://r3.o.lencr.org CA Issuers - URI:http://r3.i.lencr.org/
subjectAltName
DNS:rokson.spbrc.ru
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.letsencrypt.org
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : B7:3E:FB:24:DF:9C:4D:BA:75:F2:39:C5:BA:58:F4:6C: 5D:FC:42:CF:7A:9F:35:C4:9E:1D:09:81:25:ED:B4:99 Timestamp : Oct 20 12:26:02.855 2022 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:25:AE:7D:CE:85:39:18:AA:9E:EA:92:27: 3C:5F:EB:54:D0:59:FA:98:CA:8A:2B:E2:24:65:D6:56: 80:84:46:62:02:21:00:EC:62:FA:01:01:C4:29:B3:A9: E1:49:67:6A:9F:BE:19:CF:8A:18:58:3C:FC:2C:C1:48: 94:EE:53:9F:94:BA:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84: 16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52 Timestamp : Oct 20 12:26:02.869 2022 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:71:4A:8F:C5:5D:B5:6B:12:AA:44:BA:C2: A6:C5:7A:E6:E4:6B:AA:08:0B:74:A5:EC:43:D4:3E:3E: DF:B4:67:F9:02:20:60:EF:D7:80:7B:E3:33:83:FF:87: 8A:D6:F7:F3:6E:65:D2:87:A9:9A:80:40:BB:F7:4B:4A: 4B:30:0D:96:BC:F4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-16T08:12:48+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R3
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2020-09-04T00:00:00+00:00
Expires
2025-09-15T16:00:00+00:00
Days remaining
-396
Serial (hex)
912B084ACF0C18A753F6D62E25A75F5A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

67:AD:D1:16:6B:02:0A:E6:1B:8F:5F:C9:68:13:C0:4C:2A:A5:89:96:07:96:86:55:72:A3:C7:E7:37:61:3D:FD
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Internet Security Research Group CN=ISRG Root X1
Issuer
O=Digital Signature Trust Co. CN=DST Root CA X3
Valid from
2021-01-20T19:14:03+00:00
Expires
2024-09-30T18:14:03+00:00
Days remaining
-746
Serial (hex)
4001772137D4E942B8EE76AA3C640AB7
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6D:99:FB:26:5E:B1:C5:B3:74:47:65:FC:BC:64:8F:3C:D8:E1:BF:FA:FD:C4:C2:F9:9B:9D:47:CF:7F:F1:C2:4F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
authorityInfoAccess
CA Issuers - URI:http://apps.identrust.com/roots/dstrootcax3.p7c
authorityKeyIdentifier
C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.root-x1.letsencrypt.org
crlDistributionPoints
Full Name: URI:http://crl.identrust.com/DSTROOTCAX3CRL.crl
subjectKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →