DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

oac.gov.by · 195.50.4.123:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.oac.gov.by
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Valid from
2026-05-26T17:37:53+00:00
Expires
2026-12-11T17:37:53+00:00
Days remaining
34
Serial (hex)
0FB81C8D6CDF3258354489D7
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:www.oac.gov.by, DNS:oac.gov.by

SHA-256 fingerprint

32:52:52:E9:F8:6E:AB:75:6E:45:09:E6:FC:6B:E8:9B:DA:F1:C2:7D:CC:E0:66:78:F6:CF:51:7A:86:F1:F3:1E
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr6alphasslca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr6alphasslca2025
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr6alphasslca2025.crl
subjectAltName
DNS:www.oac.gov.by, DNS:oac.gov.by
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
subjectKeyIdentifier
58:EE:1F:6C:57:31:D5:90:7B:B7:9D:50:2F:F6:CE:2C:F7:90:0C:63
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : May 26 17:37:56.709 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:19:27:53:B7:A2:28:DE:1F:9E:C7:2B:9F: B3:F5:E9:5C:17:D5:68:23:03:D7:55:84:A2:AA:B6:50: B0:88:F4:90:02:20:77:88:9B:A9:81:93:9E:8F:15:BF: 94:B3:B0:31:05:4D:A9:42:17:D8:D4:F7:D6:8A:27:4F: 56:80:1A:65:B3:D0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : May 26 17:37:56.694 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:F7:E3:CD:95:63:AE:1C:AE:DF:A9:55: 2B:90:4D:0F:9D:BF:C4:6B:92:F9:75:05:08:D6:82:B6: 1B:13:A3:A6:02:21:00:DA:22:61:D9:83:3C:5B:A6:3C: B8:E4:81:17:4B:EA:8C:E0:FB:77:0A:8F:27:A2:1B:48: 56:23:B4:5E:E3:CD:E1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : May 26 17:37:56.706 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E8:E2:01:AA:5E:6D:F5:E3:03:98:6D: C2:7A:23:56:BF:17:25:DB:91:9A:10:5E:72:6D:EE:FD: 3D:BA:1D:A6:B9:02:21:00:C8:6B:B3:03:4A:49:12:34: 46:A1:8E:27:F7:24:44:B3:36:D0:FD:47:65:07:B4:93: 24:76:90:D7:B1:AB:0D:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-06T21:21:13+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2025-05-21T02:36:52+00:00
Expires
2027-05-21T00:00:00+00:00
Days remaining
195
Serial (hex)
837D4EB89E912FE72CAD3BC7692DDC20
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A8:83:55:92:31:F8:38:8D:AF:35:CE:41:C8:10:10:40:AE:8F:D9:B6:56:43:42:47:B9:47:5A:F5:92:CC:08:CA
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr6 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r6.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r6.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2014-12-10T00:00:00+00:00
Expires
2034-12-10T00:00:00+00:00
Days remaining
2955
Serial (hex)
45E6BB038333C3856548E6FF4551
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2C:AB:EA:FE:37:D0:6C:A2:2A:BA:73:91:C0:03:3D:25:98:29:52:C4:53:64:73:49:76:3A:3A:B5:AD:6C:CF:69
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →