DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

pifpaf.com.br · 184.193.230.20:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=Minas Gerais O=Rio Branco Alimentos S/A CN=*.pifpaf.com.br
Issuer
C=LV O=GoGetSSL CN=GoGetSSL RSA OV SSL CA 2
Valid from
2026-09-17T00:00:00+00:00
Expires
2027-01-25T23:59:59+00:00
Days remaining
73
Serial (hex)
6432419EB00A3D1A827BDE918AEE3CE9
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.pifpaf.com.br, DNS:pifpaf.com.br

SHA-256 fingerprint

B8:4E:27:37:A9:DB:68:AD:A8:55:94:83:61:E9:8B:01:7E:20:C0:DE:4E:47:F9:FA:D2:46:1F:00:C2:5F:AE:ED
Certificate extensions & PEM
authorityKeyIdentifier
49:79:7F:5E:54:FF:42:AD:21:58:52:7C:EF:2D:7D:2A:C8:A6:F9:62
subjectKeyIdentifier
2A:63:0C:BE:3A:F5:D9:BF:E8:35:25:21:86:74:40:D9:9E:3A:EE:39
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/GoGetSSLRSAOVSSLCA2.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/GoGetSSLRSAOVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.pifpaf.com.br, DNS:pifpaf.com.br
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Sep 17 15:03:17.179 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BA:0E:F5:F7:A6:EE:4A:9D:C4:5D:73: B6:CF:40:DA:C1:7F:EA:5B:A9:5C:E6:0E:17:A7:68:A9: B8:42:6C:84:6A:02:21:00:E4:C0:A0:52:1D:56:CA:07: A3:AE:DD:E5:43:EC:49:87:4A:06:8E:48:DD:9B:AC:77: 10:68:DD:D4:71:D9:0A:50 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Sep 17 15:03:17.862 2026 GMT Extensions: 00:00:05:00:0E:70:77:67 Signature : ecdsa-with-SHA256 30:45:02:20:71:BD:A6:40:6D:8B:D8:27:24:6E:DC:68: FC:47:DF:F5:71:A8:15:FA:21:79:1F:51:04:20:F7:D9: A3:B1:DE:DA:02:21:00:80:1F:E1:A3:3F:49:93:28:BF: 32:90:E1:27:41:7A:9C:0B:EF:32:D0:F5:79:4E:2B:77: 8A:D3:33:C0:1D:AC:C4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-13T22:23:11+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=LV O=GoGetSSL CN=GoGetSSL RSA OV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-08-20T00:00:00+00:00
Expires
2035-08-19T23:59:59+00:00
Days remaining
3201
Serial (hex)
E49C7458E58D27E6D84066F53F277861
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

DA:D9:BE:98:F8:10:32:6F:11:C3:A9:C4:D8:DA:7C:09:9D:80:F2:0C:8C:ED:78:AB:C5:EF:D6:BB:DE:2D:9E:D4
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
49:79:7F:5E:54:FF:42:AD:21:58:52:7C:EF:2D:7D:2A:C8:A6:F9:62
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4084
Serial (hex)
D27FBBC1DE359E5216AD6149586099C4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →