DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ospito.nl · 46.17.8.50:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=ospito.nl
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV E36
Valid from
2026-01-15T00:00:00+00:00
Expires
2027-01-22T23:59:59+00:00
Days remaining
85
Serial (hex)
230F8458AEA01BA7F7F8D5A809DFAD19
Signature
ecdsa-with-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:ospito.nl, DNS:*.cl1.ospito.nl, DNS:*.cl2.ospito.nl, DNS:*.ospito.nl, DNS:cl1.ospito.nl, DNS:cl2.ospito.nl

SHA-256 fingerprint

11:7E:48:B0:28:2D:01:C4:E5:65:CE:E3:F2:E0:7F:C6:C5:F7:1F:A2:F5:55:43:3F:AD:66:F3:A9:DC:E1:63:CC
Certificate extensions & PEM
authorityKeyIdentifier
17:99:A8:04:C1:6F:E4:2D:70:A8:0A:10:3D:03:D3:E9:1A:B8:26:63
subjectKeyIdentifier
CC:E4:56:ED:0B:AA:81:D7:4E:0A:4C:04:0D:AC:4E:EC:FE:2D:18:0F
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVE36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 15 14:02:36.680 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:37:88:F6:53:0A:06:55:0B:46:23:7C:41: D1:50:ED:32:0B:23:C6:E5:65:E7:2A:95:C9:E5:82:52: F3:64:F2:C4:02:21:00:A3:76:8E:6A:BD:61:DB:D5:D5: C1:C4:C1:17:0B:C7:AA:FB:04:92:3C:F8:11:4B:10:C7: A3:30:7D:CB:25:59:49 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jan 15 14:02:37.185 2026 GMT Extensions: 00:00:05:00:01:77:2B:A3 Signature : ecdsa-with-SHA256 30:44:02:20:76:62:0A:5C:AE:8D:0E:04:46:F0:51:76: 9C:0B:1B:E3:4C:DB:02:22:09:18:17:E9:C3:06:48:BA: DA:DB:83:1D:02:20:2C:9F:98:F0:C8:AB:A9:78:93:A8: 57:F4:73:33:B8:DD:C1:55:BA:47:04:E1:26:20:25:C3: C5:07:B8:31:46:AC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jan 15 14:02:36.648 2026 GMT Extensions: 00:00:05:00:00:0E:B8:48 Signature : ecdsa-with-SHA256 30:45:02:20:41:74:28:E3:1C:EC:72:47:54:BD:49:A0: DA:58:E1:A0:CE:C2:6C:FB:C9:14:C3:10:4F:3B:97:31: F1:71:4E:49:02:21:00:D0:4D:C2:3D:F8:E3:1C:88:3C: 78:A3:BE:3E:3F:B6:6F:DC:D1:F8:D2:1C:05:C7:C2:2C: F3:27:05:FD:56:EA:83
subjectAltName
DNS:ospito.nl, DNS:*.cl1.ospito.nl, DNS:*.cl2.ospito.nl, DNS:*.ospito.nl, DNS:cl1.ospito.nl, DNS:cl2.ospito.nl
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-29T07:17:48+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV E36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3431
Serial (hex)
36E059ED888DD57AEDD570B6727F9BDA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:3F:0B:A8:0E:3A:C2:22:65:6D:FD:04:15:8C:C1:5C:29:27:D4:2D:5D:05:F0:1D:EE:4A:47:EB:43:A9:16:DF
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
17:99:A8:04:C1:6F:E4:2D:70:A8:0A:10:3D:03:D3:E9:1A:B8:26:63
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4099
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4099
Serial (hex)
5C8B99C55A94C5D27156DECD8980CC26
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4F:F4:60:D5:4B:9C:86:DA:BF:BC:FC:57:12:E0:40:0D:2B:ED:3F:BC:4D:4F:BD:AA:86:E0:6A:DC:D2:A9:AD:7A
Certificate extensions & PEM
subjectKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----
MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDEL
MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl
eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT
JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAwMjAx
MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
Ck5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVUaGUg
VVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlm
aWNhdGlvbiBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqflo
I+d61SRvU8Za2EurxtW20eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinng
o4N+LZfQYcTxmdwlkWOrfzCjtHDix6EznPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0G
A1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNVHQ8BAf8EBAMCAQYwDwYD
VR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBBHU6+4WMB
zzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbW
RNZu9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →