DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ok.by · 93.84.119.227:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.ok.by
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Valid from
2025-12-03T10:58:28+00:00
Expires
2027-01-04T10:58:27+00:00
Days remaining
61
Serial (hex)
5F5A2F9CA8D7B3538D8E4235
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.ok.by, DNS:ok.by

SHA-256 fingerprint

BA:93:2C:77:F0:D5:D6:62:F6:73:02:2D:87:97:C3:46:B2:51:24:43:DE:22:4C:EF:69:3C:92:53:AA:27:97:78
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr6alphasslca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr6alphasslca2025
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr6alphasslca2025.crl
subjectAltName
DNS:*.ok.by, DNS:ok.by
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
subjectKeyIdentifier
99:6E:A1:BD:75:2A:CD:91:3D:20:48:4A:B5:74:D2:EF:D5:C3:4D:9D
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Dec 3 10:58:31.116 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:79:1E:51:B8:CC:94:0B:D3:3E:8A:F5:88: 42:A6:36:62:93:0D:3E:D3:24:47:7C:04:C2:F7:1B:A3: 12:F2:4D:D3:02:20:0B:E6:D1:3D:B4:51:CF:F6:54:6E: 09:58:F7:0A:75:DE:BB:98:F7:1C:42:8C:41:B8:FD:B6: 41:4D:BA:77:D5:AA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Dec 3 10:58:31.130 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:41:BC:33:98:15:0D:FC:75:F8:62:32:DA: FA:05:5A:07:60:F9:A7:1E:43:45:F5:13:43:FC:8B:B0: 86:2E:5E:C6:02:20:58:6B:96:EA:2B:96:80:67:ED:8E: AB:2D:29:EA:6D:69:2F:3B:C3:0B:76:F3:73:82:14:1C: E8:9F:92:EC:9A:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Dec 3 10:58:31.819 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CB:EA:FE:07:C5:A3:DA:3C:F5:48:EE: 8B:6A:AA:63:76:A7:B4:DA:34:27:83:9D:52:A6:3C:8D: 50:72:AC:06:58:02:21:00:C0:DB:10:2D:24:4A:1A:6D: 37:7C:53:23:E7:CC:54:E4:01:1B:24:4F:D4:96:38:C3: 7F:D1:0C:FA:70:B2:96:F1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_CHACHA20_POLY1305_SHA256 · Checked 2026-11-04T00:51:46+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2025-05-21T02:36:52+00:00
Expires
2027-05-21T00:00:00+00:00
Days remaining
197
Serial (hex)
837D4EB89E912FE72CAD3BC7692DDC20
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A8:83:55:92:31:F8:38:8D:AF:35:CE:41:C8:10:10:40:AE:8F:D9:B6:56:43:42:47:B9:47:5A:F5:92:CC:08:CA
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr6 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r6.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r6.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2019-06-19T00:00:00+00:00
Expires
2028-01-28T12:00:00+00:00
Days remaining
450
Serial (hex)
751E3F5649E74CBBF69D0026B67CAA8C
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C8:4E:13:78:B9:74:A9:91:AC:DC:DD:73:34:21:E3:06:1E:6F:A2:1A:04:91:C8:90:2B:AF:DE:38:55:E0:06:3E
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →