DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

sakura2.sidl.jp · 49.212.38.229:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=sakura2.sidl.jp
Issuer
C=US O=Let's Encrypt CN=R12
Valid from
2026-03-13T18:50:24+00:00
Expires
2026-06-11T18:50:23+00:00
Days remaining
-133
Serial (hex)
06640B3CDECA7B8AD1D566C776C1630082E5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:sakura2.sidl.jp

SHA-256 fingerprint

CA:2B:97:76:E9:E3:91:33:A5:F3:F3:C3:FD:92:89:10:25:4B:FB:F4:E0:14:F8:B3:8A:CE:E6:77:B0:AC:8B:EB
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
FD:59:88:54:A8:CC:F1:1A:A0:B0:55:08:85:A2:F4:94:74:94:A6:79
authorityKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityInfoAccess
CA Issuers - URI:http://r12.i.lencr.org/
subjectAltName
DNS:sakura2.sidl.jp
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://r12.c.lencr.org/102.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB: 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0 Timestamp : Mar 13 19:48:54.972 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:94:CC:9A:4B:8E:0B:0D:7C:AA:57:A7: D0:47:05:71:48:C3:F8:A9:93:C1:C7:EB:8F:3F:4D:88: 6D:2A:19:29:A7:02:20:2F:F2:0B:71:21:C2:33:22:8B: F1:C8:4A:EE:D7:30:46:0E:0B:C5:FA:9C:F9:9A:AD:6C: E7:19:EA:E7:1B:E9:0C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF: C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA Timestamp : Mar 13 19:48:55.034 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:EE:A7:5A:8F:D7:62:96:32:B3:CB:11: 3E:49:AE:66:40:A7:7B:C4:35:E2:7E:7B:A8:96:CB:0D: 32:E9:7A:A4:96:02:20:53:D7:86:81:F4:6B:A3:09:79: 0F:CF:85:59:12:12:05:52:37:7E:25:D0:F0:00:47:18: 6A:00:46:DB:40:1E:1D
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-22T07:28:00+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=R12
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
141
Serial (hex)
C212324B70A9B49171DC40F7E285263C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:1F:CE:77:84:01:68:99:A5:A0:02:03:A9:EF:C8:0F:18:EB:BD:75:58:07:17:ED:C1:55:35:80:93:08:36:EC
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →