DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

pensareweb.com · 213.152.201.120:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.pensareweb.it
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS RSA CA G1
Valid from
2025-01-21T00:00:00+00:00
Expires
2026-02-19T23:59:59+00:00
Days remaining
-237
Serial (hex)
06D0E94B4C128F85BB7953208D56CA8E
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.pensareweb.it, DNS:pensareweb.it

SHA-256 fingerprint

1F:27:19:31:B0:38:58:74:6D:47:AD:E7:7D:C8:47:4F:BC:EB:95:6E:A9:66:93:3B:87:B9:9B:2E:09:95:32:4F
Certificate extensions & PEM
authorityKeyIdentifier
0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
subjectKeyIdentifier
1A:65:90:A1:9C:5A:54:71:22:8A:04:12:FD:73:88:40:39:0A:CE:71
subjectAltName
DNS:*.pensareweb.it, DNS:pensareweb.it
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.rapidssl.com CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : Jan 21 15:17:40.295 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:51:71:2C:A1:A9:C1:FF:BD:43:D2:59:BA: 20:00:4F:58:3E:DA:1A:08:38:56:73:7A:E7:5F:BD:41: 60:08:EF:E8:02:21:00:B5:8E:95:F3:DF:A2:1B:E3:05: D2:A8:81:D6:7A:CB:39:11:32:E1:2D:61:46:6D:4B:07: 4B:B4:60:7D:DF:43:D4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB: 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0 Timestamp : Jan 21 15:17:40.278 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:78:6F:E5:8C:8A:32:B1:0E:20:ED:8F:8E: B0:91:56:FC:C3:E9:7C:2D:4F:DA:EC:63:3B:A0:BA:DC: C3:7D:97:DB:02:21:00:C8:59:9D:E7:A3:07:68:34:66: D0:FF:14:77:14:AC:A8:1B:37:73:4B:C0:EE:A7:7A:18: 9B:54:64:5E:67:F6:E8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Jan 21 15:17:40.298 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:44:10:6D:A4:A6:96:75:43:C3:D8:16:65: FD:25:53:61:26:14:99:5B:E1:F2:D4:EB:ED:C0:35:9D: E1:DC:0B:61:02:20:30:DF:8D:33:40:6E:A1:3C:CE:4B: 4E:0F:1E:33:7A:83:31:45:F2:80:58:9E:78:8A:54:F7: F8:BE:D5:57:C1:73
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgIQBtDpS0wSj4W7eVMgjVbKjjANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTI1MDEyMTAwMDAwMFoXDTI2MDIxOTIzNTk1OVowGjEYMBYGA1UEAwwPKi5w
ZW5zYXJld2ViLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EWx
w8gAyMlQt0iXGWP2vjk0+XcrnWtGnMPnUke0lXJeyo8qzLHl5eAiWIQ4JjtnGr1b
WAnxwP2ex+7F0QwjD+YlXBfaIYMAgMgMrnZrGEZvyYE59YmXqT4m5LZimX3BUY3P
DOgP5E234xGjK8A4chN+Jhl1GMz/0xt+db4/j2HQw2Y4cTsYAdRGc7DIuOrMgWsE
bIT/CvXH51dHXYQYOaPweIgToDKQtQbNFqPVGnblWYvK0y5SYlN4G3hlJukKBvJw
7LjkyJzsWbMm+xVWIx9eSnVOcInifaCRmBz3C/kLayt8XlH1wuw3Oaa/OTpjRlVx
xsoB3AojdKz7uyB6rQIDAQABo4IDJjCCAyIwHwYDVR0jBBgwFoAUDNtsgkkPSmcK
uBTuesRIUojrVjgwHQYDVR0OBBYEFBplkKGcWlRxIooEEv1ziEA5Cs5xMCkGA1Ud
EQQiMCCCDyoucGVuc2FyZXdlYi5pdIINcGVuc2FyZXdlYi5pdDA+BgNVHSAENzA1
MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9S
YXBpZFNTTFRMU1JTQUNBRzEuY3JsMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcw
AYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6
Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU1JTQUNBRzEuY3J0MAwG
A1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AJaXZL9VWJet
90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnGAAABlIlw00cAAAQDAEcwRQIgUXEsoanB
/71D0lm6IABPWD7aGgg4VnN651+9QWAI7+gCIQC1jpXz36Ib4wXSqIHWess5ETLh
LWFGbUsHS7Rgfd9D1AB2AGQRxGykEuyniRyiAi4AvKtPKAfUHjUnq+r+1QPJfc3w
AAABlIlw0zYAAAQDAEcwRQIgeG/ljIoysQ4g7Y+OsJFW/MPpfC1P2uxjO6C63MN9
l9sCIQDIWZ3nowdoNGbQ/xR3FKyoGzdzS8Dup3oYm1RkXmf26AB1AEmcm2neHXzs
/DbezYdkprhbrwqHgBnRVVL76esp3fjDAAABlIlw00oAAAQDAEYwRAIgRBBtpKaW
dUPD2BZl/SVTYSYUmVvh8tTr7cA1neHcC2ECIDDfjTNAbqE8zktODx4zeoMxRfKA
WJ54ilT3+L7VV8FzMA0GCSqGSIb3DQEBCwUAA4IBAQB+wSOANSyHxJsMAeTPAPC8
6wYoW/J9LNuKMWuJNUki533d6vdLBcy6w0Wv9brmI4n+rqSdyw/6Wd4ZV6BUJfqm
Ru0V6qH63mCzlZAp9RB/PUSYfJkRgQqHCFG/od/6u/ZbGf0ZFIXDkMBHXX9VleKm
q8d++UEbkqghwrLwJyBgkEN34tTg4cXLGfH+5JEICRoijkCDtTNVkIvCqV3n9h0/
njLTdLvlTib17ShSFLIEmd8OK7+XPJx5hdt6yDJSce4pRZVjUqoH8d2Xj/3tRIeQ
EcBW7KSM742bUDyBf4hiPdl3eas6jUsXicuP+DQwdc1Zx0Z1vZQpe18D9VK8hYih
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-14T19:10:13+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:24:33+00:00
Expires
2027-11-02T12:24:33+00:00
Days remaining
383
Serial (hex)
0B259422CED9812A15A04E99528A0EFA
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

44:22:E9:63:EE:53:CD:58:CC:9F:85:CD:40:BF:5F:FE:C0:09:5F:DF:1A:15:45:35:66:1C:1C:06:BC:AD:C6:9B
Certificate extensions & PEM
subjectKeyIdentifier
0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.1.1 CPS: https://www.digicert.com/CPS Policy: 2.16.840.1.114412.1.2 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----
MIIEszCCA5ugAwIBAgIQCyWUIs7ZgSoVoE6ZUooO+jANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0xNzExMDIxMjI0MzNaFw0yNzExMDIxMjI0MzNaMGAxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xHzAdBgNVBAMTFlJhcGlkU1NMIFRMUyBSU0EgQ0EgRzEwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC/uVklRBI1FuJdUEkFCuDL/I3aJQiaZ6aibRHj
ap/ap9zy1aYNrphe7YcaNwMoPsZvXDR+hNJOo9gbgOYVTPq8gXc84I75YKOHiVA4
NrJJQZ6p2sJQyqx60HkEIjzIN+1LQLfXTlpuznToOa1hyTD0yyitFyOYwURM+/CI
8FNFMpBhw22hpeAQkOOLmsqT5QZJYeik7qlvn8gfD+XdDnk3kkuuu0eG+vuyrSGr
5uX5LRhFWlv1zFQDch/EKmd163m6z/ycx/qLa9zyvILc7cQpb+k7TLra9WE17YPS
n9ANjG+ECo9PDW3N9lwhKQCNvw1gGoguyCQu7HE7BnW8eSSFAgMBAAGjggFmMIIB
YjAdBgNVHQ4EFgQUDNtsgkkPSmcKuBTuesRIUojrVjgwHwYDVR0jBBgwFoAUTiJU
IBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMDQGCCsGAQUFBwEB
BCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEIGA1Ud
HwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds
b2JhbFJvb3RHMi5jcmwwYwYDVR0gBFwwWjA3BglghkgBhv1sAQEwKjAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzALBglghkgBhv1sAQIw
CAYGZ4EMAQIBMAgGBmeBDAECAjANBgkqhkiG9w0BAQsFAAOCAQEAGUSlOb4K3Wtm
SlbmE50UYBHXM0SKXPqHMzk6XQUpCheF/4qU8aOhajsyRQFDV1ih/uPIg7YHRtFi
CTq4G+zb43X1T77nJgSOI9pq/TqCwtukZ7u9VLL3JAq3Wdy2moKLvvC8tVmRzkAe
0xQCkRKIjbBG80MSyDX/R4uYgj6ZiNT/Zg6GI6RofgqgpDdssLc0XIRQEotxIZcK
zP3pGJ9FCbMHmMLLyuBd+uCWvVcF2ogYAawufChS/PT61D9rqzPRS5I2uqa3tmIT
44JhJgWhBnFMb7AGQkvNq9KNS9dd3GWc17H/dXa1enoxzWjE0hBdFjxPhUb0W3wi
8o34/m8Fxw==
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →