DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

olemans.be · 31.24.249.122:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
Issuer
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validated TLS Server ECC CA 2025
Valid from
2026-10-16T07:33:03+00:00
Expires
2027-01-16T08:32:03+00:00
Days remaining
90
Serial (hex)
6CDDD6660241072003B4E3B47A04B069
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:olemans.be

SHA-256 fingerprint

9B:D1:99:FA:3C:B7:01:F1:07:E7:6A:67:D2:3F:1D:D1:B0:B6:68:62:BC:3C:A4:DB:56:C7:A1:0F:20:BD:A6:B9
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
3F:2B:EA:35:9C:76:59:0C:CD:91:7A:3E:2F:74:E5:3A:90:73:97:E0
authorityInfoAccess
CA Issuers - URI:http://cacert.actalis.it/certs/tls-subca-ecc-dv-2025 OCSP - URI:http://ocsp15.actalis.it/va/tls-subca-ecc-dv-2025
subjectAltName
DNS:olemans.be
certificatePolicies
Policy: 1.3.159.1.22.1 CPS: https://www.actalis.it/area-download Policy: 2.23.140.1.2.1
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl15.actalis.it/Repository/tls-subca-ecc-dv-2025/getLastCRL
subjectKeyIdentifier
38:A4:6D:FA:D7:63:37:17:09:E7:19:32:0F:34:79:22:7B:0B:E0:94
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Oct 16 07:43:04.481 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3D:0D:37:61:BB:4A:AF:8D:00:4C:45:74: C8:54:AB:5B:27:2C:EC:29:93:D8:E4:1F:B8:30:1E:B5: F8:15:F7:DB:02:21:00:96:19:2A:60:A5:65:8E:E5:3A: EA:AB:AF:2E:37:2D:2B:C4:12:B7:5B:20:A8:CC:58:C9: 78:9D:FB:C9:27:F2:30 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Oct 16 07:43:04.830 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:EF:31:80:6E:2B:58:4B:62:C4:44:B1: 6C:C8:35:5A:89:D9:C8:4A:ED:97:74:8D:59:76:4E:06: 71:8E:EF:BA:D8:02:21:00:AE:65:52:5D:DE:45:7F:E6: 5E:1A:76:29:2E:9B:B2:53:AE:B1:3A:FA:20:45:3C:BD: 59:1F:FC:B5:E4:9D:08:E5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Oct 16 07:43:04.835 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6A:63:4B:B4:CA:FE:43:26:AB:AE:69:EA: C2:1B:E8:4C:35:94:CD:4A:7D:BF:39:B1:54:44:75:F4: A8:F6:D6:3B:02:21:00:F7:C0:8C:06:3F:20:8B:C5:31: 9E:86:B9:AF:64:BB:49:09:A9:88:0C:9A:DE:73:4B:BA: BE:94:E3:66:15:31:4F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-18T03:14:09+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validated TLS Server ECC CA 2025
Issuer
C=IT O=Actalis S.p.A. CN=Actalis TLS Server ECC Root CA 2025
Valid from
2025-07-07T09:52:12+00:00
Expires
2035-07-05T09:52:11+00:00
Days remaining
3182
Serial (hex)
7FA8268C4D449BF501861FBF572A77A7
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E1:02:A5:2A:01:6B:02:5B:31:C7:49:A9:A0:A7:F4:65:0E:12:27:AF:A2:7C:27:E9:A3:7C:84:6A:D4:2F:A8:B0
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
30:22:BD:D5:9A:B5:D2:87:2F:FF:A6:7C:A3:B5:4C:16:57:F0:AE:0C
authorityInfoAccess
CA Issuers - URI:http://cacert.actalis.it/certs/tls-root-ecc-2025 OCSP - URI:http://ocsp13.actalis.it/va/tls-root-ecc-2025
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.actalis.com/legal-repository
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl13.actalis.it/Repository/tls-root-ecc-2025/getLastCRL
subjectKeyIdentifier
3F:2B:EA:35:9C:76:59:0C:CD:91:7A:3E:2F:74:E5:3A:90:73:97:E0
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=IT O=Actalis S.p.A. CN=Actalis TLS Server ECC Root CA 2025
Issuer
C=IT L=Milan O=Actalis S.p.A./03358520967 CN=Actalis Authentication Root CA
Valid from
2025-08-07T08:09:33+00:00
Expires
2030-09-22T11:22:02+00:00
Days remaining
1435
Serial (hex)
082CDA83152D404731E1ECEA538371C4
Signature
RSA-SHA512
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

47:1F:64:46:99:FD:03:8E:07:D7:3D:6E:98:05:86:AA:23:2F:A7:DC:AD:57:38:0B:0C:89:ED:D1:DC:FD:B6:1E
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
authorityInfoAccess
OCSP - URI:http://ocsp05.actalis.it/VA/AUTH-ROOT
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL
subjectKeyIdentifier
30:22:BD:D5:9A:B5:D2:87:2F:FF:A6:7C:A3:B5:4C:16:57:F0:AE:0C
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →