DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

pral.com.pk · 103.125.60.72:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=PK L=Islamabad O=PAKISTAN REVENUE AUTOMATION (PRIVATE) LIMITED CN=pral.com.pk
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2026-07-13T00:00:00+00:00
Expires
2027-01-27T23:59:59+00:00
Days remaining
98
Serial (hex)
09120CDD804D74959036571038B5382E
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:pral.com.pk, DNS:exchange.pral.com.pk, DNS:mail.carec-ribs.gov.pk, DNS:ims.pral.com.pk, DNS:mail.bra.gob.pk, DNS:mx01.pral.com.pk, DNS:mx04.pral.com.pk, DNS:portal.pral.com.pk, DNS:mail.pra.punjab.gov.pk, DNS:crm.pral.com.pk, DNS:ajkird.gov.pk, DNS:mail.ajkird.gov.pk, DNS:excas1.ajkird.gov.pk, DNS:excas2.ajkird.gov.pk, DNS:autodiscover.ajkird.gov.pk, DNS:excas1.pral.com.pk, DNS:excas2.pral.com.pk, DNS:dcdocs.pral.com.pk, DNS:autodiscover.pral.com.pk, DNS:reg.pra.punjab.gov.pk, DNS:devops.pral.com.pk, DNS:gw.pral.com.pk, DNS:dicrm.pral.com.pk, DNS:sftp.pral.com.pk, DNS:www.pral.com.pk, DNS:www.exchange.pral.com.pk, DNS:www.mail.carec-ribs.gov.pk, DNS:www.ims.pral.com.pk, DNS:www.mail.bra.gob.pk, DNS:www.mx01.pral.com.pk, DNS:www.mx04.pral.com.pk, DNS:www.portal.pral.com.pk, DNS:www.mail.pra.punjab.gov.pk, DNS:www.crm.pral.com.pk, DNS:www.ajkird.gov.pk, DNS:www.mail.ajkird.gov.pk, DNS:www.excas1.ajkird.gov.pk, DNS:www.excas2.ajkird.gov.pk, DNS:www.autodiscover.ajkird.gov.pk, DNS:www.excas1.pral.com.pk, DNS:www.excas2.pral.com.pk, DNS:www.dcdocs.pral.com.pk, DNS:www.autodiscover.pral.com.pk, DNS:www.reg.pra.punjab.gov.pk, DNS:www.devops.pral.com.pk, DNS:www.gw.pral.com.pk, DNS:www.dicrm.pral.com.pk, DNS:www.sftp.pral.com.pk

SHA-256 fingerprint

40:2A:2D:84:99:2C:B9:45:F0:5F:C8:52:77:87:D2:B2:6A:37:2D:AE:EF:FA:44:95:B0:70:32:36:68:DD:94:C0
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
E1:E3:0F:25:FE:90:8F:50:80:3F:E9:CE:DD:8E:06:DB:3B:B3:02:69
subjectAltName
DNS:pral.com.pk, DNS:exchange.pral.com.pk, DNS:mail.carec-ribs.gov.pk, DNS:ims.pral.com.pk, DNS:mail.bra.gob.pk, DNS:mx01.pral.com.pk, DNS:mx04.pral.com.pk, DNS:portal.pral.com.pk, DNS:mail.pra.punjab.gov.pk, DNS:crm.pral.com.pk, DNS:ajkird.gov.pk, DNS:mail.ajkird.gov.pk, DNS:excas1.ajkird.gov.pk, DNS:excas2.ajkird.gov.pk, DNS:autodiscover.ajkird.gov.pk, DNS:excas1.pral.com.pk, DNS:excas2.pral.com.pk, DNS:dcdocs.pral.com.pk, DNS:autodiscover.pral.com.pk, DNS:reg.pra.punjab.gov.pk, DNS:devops.pral.com.pk, DNS:gw.pral.com.pk, DNS:dicrm.pral.com.pk, DNS:sftp.pral.com.pk, DNS:www.pral.com.pk, DNS:www.exchange.pral.com.pk, DNS:www.mail.carec-ribs.gov.pk, DNS:www.ims.pral.com.pk, DNS:www.mail.bra.gob.pk, DNS:www.mx01.pral.com.pk, DNS:www.mx04.pral.com.pk, DNS:www.portal.pral.com.pk, DNS:www.mail.pra.punjab.gov.pk, DNS:www.crm.pral.com.pk, DNS:www.ajkird.gov.pk, DNS:www.mail.ajkird.gov.pk, DNS:www.excas1.ajkird.gov.pk, DNS:www.excas2.ajkird.gov.pk, DNS:www.autodiscover.ajkird.gov.pk, DNS:www.excas1.pral.com.pk, DNS:www.excas2.pral.com.pk, DNS:www.dcdocs.pral.com.pk, DNS:www.autodiscover.pral.com.pk, DNS:www.reg.pra.punjab.gov.pk, DNS:www.devops.pral.com.pk, DNS:www.gw.pral.com.pk, DNS:www.dicrm.pral.com.pk, DNS:www.sftp.pral.com.pk
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jul 13 13:29:32.710 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:23:0F:D9:F4:56:53:51:30:D9:59:09:F4: 77:0C:57:96:DF:44:E8:CA:30:91:93:39:9D:37:47:63: AD:42:F7:4A:02:21:00:D6:A0:82:1C:6E:6B:F0:40:19: 77:6D:C2:29:3A:28:9B:CE:EC:A2:6D:00:8C:85:58:9F: 83:13:F3:96:7F:02:F7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 13 13:29:32.731 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6D:5F:87:58:EF:B3:70:38:15:F9:AA:48: 2C:3C:EB:4A:CA:10:E1:CA:05:AF:BB:E8:03:30:F7:4E: 91:E8:96:C3:02:20:36:1B:EF:62:7D:53:FF:41:D2:C8: B4:E3:42:EB:81:C2:0E:AE:3C:60:48:EA:37:6A:72:78: F8:8F:72:77:F0:F5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 13 13:29:32.864 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:58:05:9E:BC:FB:A2:DB:1D:AE:C1:54:14: 32:DD:44:2F:EC:A4:AA:8D:C7:1B:1E:4E:BD:92:E0:C5: 6A:BE:AF:7C:02:21:00:E3:90:BF:65:C0:98:83:52:1E: 1E:29:0E:56:B7:FB:E8:14:75:2C:D1:8D:05:D5:5A:D2: 0A:AA:20:57:CE:18:7C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-21T02:21:37+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2021-03-30T00:00:00+00:00
Expires
2031-03-29T23:59:59+00:00
Days remaining
1620
Serial (hex)
0CF5BD062B5602F47AB8502C23CCF066
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →