THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

selfnet.cz · 81.200.48.35:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=nej.cz
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL RSA DV SSL CA 2
Valid from
2026-08-26T00:00:00+00:00
Expires
2026-11-24T23:59:59+00:00
Days remaining
43
Serial (hex)
24BF87483C1860C7D3C312810165DDF3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:nej.cz, DNS:297.cz, DNS:internetpokabelu.cz, DNS:klient.net202.cz, DNS:kyklop.cz, DNS:moje.nej.cz, DNS:moje.vivotelco.cz, DNS:nejtv.cz, DNS:poruba.net, DNS:riomedia.cz, DNS:selfnet.cz, DNS:www.297.cz, DNS:www.internetpokabelu.cz, DNS:www.kyklop.cz, DNS:www.nej.cz, DNS:www.nejtv.cz, DNS:www.poruba.net, DNS:www.riomedia.cz, DNS:www.selfnet.cz

SHA-256 fingerprint

81:39:0C:19:9F:F8:53:84:BF:86:1E:AE:B7:3D:E5:E8:01:1B:51:CC:C6:0C:42:09:E7:52:D9:10:8A:64:E7:25
Certificate extensions & PEM
authorityKeyIdentifier
4B:BE:FA:76:84:23:44:04:B9:CE:BE:31:6F:E9:F5:32:06:FF:0C:57
subjectKeyIdentifier
64:E4:1F:F6:87:AD:44:89:E5:EB:3B:26:B9:F9:BC:37:3E:77:05:2B
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLRSADVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Aug 26 10:05:28.020 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:19:2F:A6:98:42:2E:8F:DB:08:B7:FE:FA: E3:B2:11:5F:E1:D1:9F:23:B0:7E:7B:EF:D4:98:35:04: 4B:50:B7:FC:02:21:00:B6:6F:3F:30:4D:1B:6B:01:D0: 4C:27:E1:5F:2F:57:5B:2E:D1:AE:EC:CE:23:DD:20:98: 41:F9:67:83:ED:63:65 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Aug 26 10:05:28.021 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:61:9C:25:5C:3F:D5:CF:46:62:F3:A2:56: E4:9F:13:FB:2C:A5:34:C3:5F:D5:8F:A6:9B:04:39:D1: DE:D1:68:4E:02:21:00:DB:62:C2:57:27:DA:8C:D8:B7: C5:EC:30:87:60:0B:86:1B:D4:47:A2:B0:74:1E:6E:A0: B0:67:F2:5F:B7:95:61
subjectAltName
DNS:nej.cz, DNS:297.cz, DNS:internetpokabelu.cz, DNS:klient.net202.cz, DNS:kyklop.cz, DNS:moje.nej.cz, DNS:moje.vivotelco.cz, DNS:nejtv.cz, DNS:poruba.net, DNS:riomedia.cz, DNS:selfnet.cz, DNS:www.297.cz, DNS:www.internetpokabelu.cz, DNS:www.kyklop.cz, DNS:www.nej.cz, DNS:www.nejtv.cz, DNS:www.poruba.net, DNS:www.riomedia.cz, DNS:www.selfnet.cz
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-12T04:16:14+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL RSA DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3268
Serial (hex)
D0A908255F8E50E5F3396D1114702A37
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EC:9D:6B:CA:B9:81:8B:7D:D5:9E:D6:1D:A2:3A:65:8A:96:A9:C4:E9:50:ED:EE:0D:2D:A9:3E:7C:F2:17:47:80
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
4B:BE:FA:76:84:23:44:04:B9:CE:BE:31:6F:E9:F5:32:06:FF:0C:57
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----
MIIGITCCBAmgAwIBAgIRANCpCCVfjlDl8zltERRwKjcwDQYJKoZIhvcNAQEMBQAw
XzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UE
AxMtU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2
MB4XDTI1MDkyNDAwMDAwMFoXDTM1MDkyMzIzNTk1OVowRjELMAkGA1UEBhMCQVQx
FTATBgNVBAoTDFplcm9TU0wgR21iSDEgMB4GA1UEAxMXWmVyb1NTTCBSU0EgRFYg
U1NMIENBIDIwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCnXX3Qm/G+
ujylvYIkhJ53ZZ7XM03vXY03sCnO9VWjwMsV0qCQMlvhuRiJwrm4M5jgGehxIiCR
1qT0AyL2rHTWJR07vjJzuNmp7uoKu3HKwixBk9QuXD5aliO8/EDbzdZDcG/Hm5pC
mOeusLtds/UE/Iq24nw5WpcgZE5Ly+F/yCYDuEa7hXLJAPM5SecJIblG1OQ3ukMl
HHNBbDxBpGWTyDudd0DTed0NTgCPs1t8RZPhW9Gt/8nDwFX0pQ4eHfPEB8c6eNl2
sRr2Afp1YErakR+53yEX2SXc2Kz0fbTlUc+To0ULGcJiWNyZwj//DTZ+M4xxsT2T
qjQ4Xfvm2EUTymrXDrh1Pm/wkBouu860c6eeQfNlKlccUyHOSeKCtPIWreMvH3Be
Ydeu3DwI8lefn/VUhSB2Bbz7hX3qz3oMmtSTmWhTnobyKlx1L2b/oloaqpy1cBc/
QiLRSOptYGPjZtX0pRrTVKQXeP2rPUk0y5q/40WRpugSlHCX6aceWnsCAwEAAaOC
AW8wggFrMB8GA1UdIwQYMBaAFFZzWGSV+ZIasBIqBGJ5oUAViCFJMB0GA1UdDgQW
BBRLvvp2hCNEBLnOvjFv6fUyBv8MVzAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/
BAgwBgEB/wIBADATBgNVHSUEDDAKBggrBgEFBQcDATATBgNVHSAEDDAKMAgGBmeB
DAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1Nl
Y3RpZ29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYuY3JsMIGEBggr
BgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20v
U2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdFI0Ni5wN2MwIwYI
KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBDAUA
A4ICAQCJ/3v2/vdexHsdVyXL9aCTQE01YXl23866TVM/LgRpRW+kneZXXZxP0hy4
GnvlqUcxTq97B6qPdQcQxQxpGne7CRn0nWauzqieMcJzYl3fDC2Q/ANyPhyrbwCI
zx9EsRrgfjvuJCaUMtlfYpKqBUYiPOCPAN0HdrLD5hU6oV1tvWVsUzTA43skC3uH
wQM5YPIk0NDJFw3NhQPOIOwbq09T+SYSEZvsJ3t4sA4H3gh03RETNaAwTcTNS/+u
1tAeQUZZmKQyLWYLyoxvbISp/MFr9xqhDqrpAurYVNeiLJ5+4/WZPml20yNZjcxV
KKqRYdEurl8rmI2toCnCDWiEcTDvoYGtz60eYIt7VJID4DrCjTxAWTWh2T5ag2pK
ryNJGt8BFGLtjeD774SxAFn5MGYBVvEK4LXmCjVX78pb6/0Dceo71dlQUK68yftb
+yTeyoqjwgk2L8vNSrkj6UTkvvqXSONFuVU7bvC0O/9bi5MXBv7QUivMNxDsTtaT
IZO7PsSCRmLraQM2EPBgbNL9lRSEYi4Hj+NicT/e87pbhv88k0oec9xGcnkcvZpN
sJBz78mkZfeFIIjh02e2y9ke/Fqw1FbdhHtU2myaFnX0sRyGLmI/vzXSwyvT+Kxl
Wx8FV64z2PBdwd0vXRaAMXomGC0M1vQa5fBDn4dimzewsSiphQ==
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →