THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

pop-nix.com · 103.246.18.21:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=pop-nix.com
Issuer
C=US O=Let's Encrypt CN=R12
Valid from
2025-10-01T05:20:28+00:00
Expires
2025-12-30T05:20:27+00:00
Days remaining
-277
Serial (hex)
057A6860B1C9B027C8EAAFA063B3EC536632
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:pop-nix.com, DNS:webmail.pop-nix.com, DNS:www.pop-nix.com

SHA-256 fingerprint

7D:AD:30:B3:7F:B6:E3:E4:D2:95:22:05:81:F2:34:75:D9:F7:AB:BB:EA:8D:50:0D:A8:6A:2C:28:E0:33:33:D8
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
26:81:DD:6C:2C:1E:1D:EE:2F:9B:10:48:FB:21:CD:46:3F:67:97:8C
authorityKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityInfoAccess
CA Issuers - URI:http://r12.i.lencr.org/
subjectAltName
DNS:pop-nix.com, DNS:webmail.pop-nix.com, DNS:www.pop-nix.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r12.c.lencr.org/51.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Oct 1 06:18:58.263 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:91:BC:C4:07:5B:B9:84:D5:1E:55:F5: 02:4D:3E:6E:76:F5:FE:F6:2E:77:AB:FE:46:6D:ED:13: 44:F1:28:07:AC:02:21:00:D3:EB:95:14:20:7A:EF:21: 10:79:09:3A:4B:C8:A7:29:5D:7F:BC:25:F5:CA:D9:C4: 4B:DA:E4:CB:DF:B0:58:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Oct 1 06:18:58.246 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E3:89:06:8C:FF:AF:55:F1:0C:31:38: 4E:E4:1E:C0:CE:64:01:42:04:52:7E:63:AD:EB:90:3A: 4A:8C:53:BB:69:02:21:00:A8:74:F8:A5:EF:C2:1D:67: 01:4B:5A:2D:47:45:8B:50:1A:02:D3:DF:11:21:A3:27: 20:A6:05:80:B0:11:B9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-02T17:07:09+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R12
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
161
Serial (hex)
C212324B70A9B49171DC40F7E285263C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:1F:CE:77:84:01:68:99:A5:A0:02:03:A9:EF:C8:0F:18:EB:BD:75:58:07:17:ED:C1:55:35:80:93:08:36:EC
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →