DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

okhysing.is · 94.142.152.7:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=web10.okhysing.is
Issuer
C=US O=Let's Encrypt CN=R12
Valid from
2025-10-20T01:38:25+00:00
Expires
2026-01-18T01:38:24+00:00
Days remaining
-291
Serial (hex)
057183FBBFF5DF8018389C3C57FE8B47EAF7
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:web10.okhysing.is

SHA-256 fingerprint

21:69:CA:EA:84:F5:AD:3E:13:84:81:35:AE:8D:5F:D4:EE:A3:A2:68:CB:0F:53:79:A8:38:64:13:AA:46:F1:AC
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
98:D7:6F:3D:AC:B8:69:6D:6B:A0:F6:1D:D8:15:FE:41:9E:92:80:E2
authorityKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityInfoAccess
CA Issuers - URI:http://r12.i.lencr.org/
subjectAltName
DNS:web10.okhysing.is
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r12.c.lencr.org/120.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Oct 20 02:36:55.921 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:24:72:BD:FF:B8:F8:A8:77:83:67:04:EB: A0:0F:8D:E2:E1:9B:CF:AD:FF:25:96:40:AD:F7:D2:B1: 4B:DD:98:3E:02:20:07:ED:62:5F:3D:59:31:CF:90:9E: C1:0B:7E:C9:E3:0D:04:A0:FD:7F:4C:50:71:1F:B0:AA: 6C:80:56:A6:43:26 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90: DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21 Timestamp : Oct 20 02:36:55.912 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C9:22:CB:AB:23:F2:3A:29:6B:F1:12: 05:A2:6F:A1:3D:DF:9C:FE:CD:34:C5:96:48:64:83:94: 1A:2F:F2:78:15:02:21:00:A1:3E:C3:08:D5:6C:F4:D1: CF:A1:39:22:64:BD:B1:A7:50:6D:29:FD:B5:42:D6:7F: DE:0B:1B:87:FF:A6:5B:47
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISBXGD+7/134AYOJw8V/6LR+r3MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTIwHhcNMjUxMDIwMDEzODI1WhcNMjYwMTE4MDEzODI0WjAcMRowGAYDVQQD
ExF3ZWIxMC5va2h5c2luZy5pczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQtdaLms4u4BUhbSLJdtCYdCZlWmkUnQbEa3Hp9r2/NW0/YZBTwFu+RxSAR
bZASQ3UXmFywwmGpZVttQCsb9onNBT7J0eVvUghrNlwocFLe1xcETvoqtF/VeI20
jYzWxEncbVfiX1/+3ErVdS1DaQpdVciIF2gKWg1sbHYuu0w3kVaQQ/IoyfGBrOZL
DXP4ZWRVaUFOA9DbejXP9Z0h2yqZavMdgmoV6p9FiGwUoR59XEGbjBZMwN7j79b3
vQFy8scL2p+pgyX30pLYImJSuYMZqZ8FHdnoPLK6kIZE8vKrH2yprPf92QY2h9/J
MFHycxJ5C6cl8/0lODV4W6OnvwcCAwEAAaOCAiIwggIeMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUmNdvPay4aW1roPYd2BX+QZ6SgOIwHwYDVR0jBBgwFoAUALUp8i2O
bzHom0yteD763OkM0dIwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRw
Oi8vcjEyLmkubGVuY3Iub3JnLzAcBgNVHREEFTATghF3ZWIxMC5va2h5c2luZy5p
czATBgNVHSAEDDAKMAgGBmeBDAECATAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8v
cjEyLmMubGVuY3Iub3JnLzEyMC5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dQBJnJtp3h187Pw23s2HZKa4W68Kh4AZ0VVS++nrKd34wwAAAZn/ehjxAAAEAwBG
MEQCICRyvf+4+Kh3g2cE66APjeLhm8+t/yWWQK330rFL3Zg+AiAH7WJfPVkxz5Ce
wQt+yeMNBKD9f0xQcR+wqmyAVqZDJgB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl
3SGpJaxhxU4hAAABmf96GOgAAAQDAEgwRgIhAMkiy6sj8jopa/ESBaJvoT3fnP7N
NMWWSGSDlBov8ngVAiEAoT7DCNVs9NHPoTkiZL2xp1BtKf21QtZ/3gsbh/+mW0cw
DQYJKoZIhvcNAQELBQADggEBAGSRxzfVltsOrDJy4hl7JpNuqASB0K9VVr0Agn2E
ZRHlUyP+F5PDHnoTJUjnKf6TSZGzgpC5PO8b+qljLW1cmWoS0NTS1D9kBJY+GT1b
VOGcnypi133GLOEnGiTi8baBPBtXCrkr5Tb5ddYkFjQ5F/yDTiqr8q/6vicnPH9g
UNblHqQHktMxSD+ODU2K0v/p8u1wWwjv38pT4Crb53kn5oK8T1/lvydKJ1rk1t7B
3zTdNKkIRsaAfXcUzaDIbVv+16xn5rd358RnyP89Swwf1HUJLuF8DYP2kCXHpRtX
QEli5e2wUy68O+b/joiJuiYxXyIcibBshWal1wL8R50EcCw=
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-11-04T09:37:35+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R12
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
128
Serial (hex)
C212324B70A9B49171DC40F7E285263C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:1F:CE:77:84:01:68:99:A5:A0:02:03:A9:EF:C8:0F:18:EB:BD:75:58:07:17:ED:C1:55:35:80:93:08:36:EC
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →