DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

pnmresources.com · 52.17.152.5:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`*.investisdigital.com' did not match expected CN=`pnmresources.com'

Certificate verification failed

Subject
C=IN ST=Gujarat L=Vadodara O=INVESTIS DIGITAL INDIA PRIVATE LIMITED CN=*.investisdigital.com
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2025-11-15T01:41:14+00:00
Expires
2026-12-17T01:41:13+00:00
Days remaining
84
Serial (hex)
45D00D385B5F2684BD1F960F
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.investisdigital.com, DNS:idx.inc, DNS:myidx.cloud, DNS:investis.com, DNS:investis.co.uk, DNS:investisdigital.uk, DNS:investisdigital.us, DNS:investisdigital.co.uk, DNS:*.idx.inc, DNS:*.myidx.cloud, DNS:*.investis.com, DNS:*.investis.co.uk, DNS:*.investisdigital.uk, DNS:*.investisdigital.us, DNS:*.investisdigital.co.uk, DNS:investisdigital.com

SHA-256 fingerprint

7A:AA:AE:2B:D2:3E:D8:3A:08:BD:59:EE:82:89:03:E0:A0:BD:D8:9F:EA:A9:12:30:2D:50:E9:D2:D9:11:63:64
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsrsaovsslca2018.crl
subjectAltName
DNS:*.investisdigital.com, DNS:idx.inc, DNS:myidx.cloud, DNS:investis.com, DNS:investis.co.uk, DNS:investisdigital.uk, DNS:investisdigital.us, DNS:investisdigital.co.uk, DNS:*.idx.inc, DNS:*.myidx.cloud, DNS:*.investis.com, DNS:*.investis.co.uk, DNS:*.investisdigital.uk, DNS:*.investisdigital.us, DNS:*.investisdigital.co.uk, DNS:investisdigital.com
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
08:66:8D:8B:C6:AF:B0:8F:B4:FE:E2:13:80:0F:B0:07:0A:1E:A6:AF
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 15 01:41:18.503 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B0:66:E8:28:98:46:7C:72:5E:C9:E7: C6:19:D8:0E:16:50:E3:CC:99:44:20:FD:91:2E:0F:B0: 3D:E8:21:9C:E6:02:21:00:99:81:43:70:81:33:18:0F: 26:91:BF:B9:AF:69:00:45:D2:72:DA:2D:39:80:98:28: 82:35:DA:D8:D9:98:F1:30 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Nov 15 01:41:18.428 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:38:B2:F3:2C:56:E3:52:B5:6D:61:8A:B8: 80:7B:EF:77:AB:AE:CE:91:AE:FE:8F:DE:1C:4F:1E:60: A7:27:57:C4:02:20:1A:A2:BD:89:39:6B:50:35:93:0B: 75:8E:3F:BD:6C:08:93:48:86:5E:85:EF:68:67:C0:09: 55:0B:AA:5C:91:8C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 15 01:41:18.422 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8B:8D:56:92:36:15:7F:EC:7F:01:4C: A0:43:D1:5E:B6:8C:87:B0:B8:D9:2A:04:42:48:A6:49: 59:29:35:4F:DA:02:21:00:F6:F7:21:57:1F:A6:0F:19: 7C:5C:E9:80:58:FD:15:8E:02:0C:EC:D4:9B:FC:4D:3A: 52:A9:8F:05:6E:AA:43:C3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-23T14:00:09+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
789
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →