DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

serpro.gov.br · 161.148.175.208:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=DISTRITO FEDERAL L=BRASILIA O=SERVICO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO) CN=*.serpro.gov.br
Issuer
C=BR O=SERVICO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO) CN=AC SERPRO AR46 OV TLS CA 2025
Valid from
2026-06-03T19:37:20+00:00
Expires
2026-12-19T19:37:19+00:00
Days remaining
63
Serial (hex)
01C9664E56E5F75686D74744E93E2E1D
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.serpro.gov.br, DNS:serpro.gov.br

SHA-256 fingerprint

44:60:31:FC:4D:DC:6D:35:98:81:5D:02:F4:80:AE:FD:BB:68:56:02:90:93:61:22:55:A5:71:9D:FC:74:31:C6
Certificate extensions & PEM
subjectAltName
DNS:*.serpro.gov.br, DNS:serpro.gov.br
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
subjectKeyIdentifier
FF:5E:DA:5C:2E:6E:E7:5A:69:B7:E0:70:1D:C3:CA:73:F0:3B:38:7A
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2 CPS: https://www.globalsign.com/repository/ Policy: 1.3.6.1.4.1.4146.1.20
basicConstraints
CA:FALSE
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/ca/acserproar46ovtlsca2025 CA Issuers - URI:http://secure.globalsign.com/cacert/acserproar46ovtlsca2025.crt
authorityKeyIdentifier
41:50:99:51:78:E1:75:4E:C1:FF:67:15:E1:2E:D0:B2:23:D4:3D:86
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/ca/acserproar46ovtlsca2025.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Jun 3 19:37:23.246 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:8F:A3:88:1C:6E:A2:6A:6C:CF:0B:75: DF:FF:15:0B:BE:0F:A4:CC:D4:7C:32:A2:17:46:9F:0C: 98:4B:B9:70:E9:02:20:0C:46:B2:93:BB:1D:9A:DB:10: C2:DE:45:F9:37:4D:14:B4:2A:E2:2C:ED:75:17:24:1C: 99:8F:2B:99:32:6D:4E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Jun 3 19:37:23.422 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:54:B1:18:31:79:B2:4A:F0:85:9A:F1:CC: 4A:B7:7F:5C:C2:0C:76:9C:8D:1F:BF:98:57:19:C6:CE: 3C:13:3E:06:02:21:00:A6:48:51:6E:BE:E1:2C:DE:8A: 58:94:C8:14:49:89:DB:2A:0A:33:87:D5:CA:A7:83:94: 5A:88:0F:87:D4:4D:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 3 19:37:23.531 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:DE:C7:DD:BB:A0:8A:4E:00:E5:A4: 32:6F:A9:E3:6A:42:C4:B4:63:7C:B0:EA:97:28:11:70: B5:3C:DD:74:8B:02:20:0F:C8:22:A7:9D:09:91:3A:1E: 46:A1:46:1A:42:9D:0F:3E:0F:CC:B3:7D:36:93:DF:5F: A0:F2:A4:19:03:C2:9E
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIQAclmTlbl91aG10dE6T4uHTANBgkqhkiG9w0BAQsFADBy
MQswCQYDVQQGEwJCUjE7MDkGA1UEChMyU0VSVklDTyBGRURFUkFMIERFIFBST0NF
U1NBTUVOVE8gREUgREFET1MgKFNFUlBSTykxJjAkBgNVBAMTHUFDIFNFUlBSTyBB
UjQ2IE9WIFRMUyBDQSAyMDI1MB4XDTI2MDYwMzE5MzcyMFoXDTI2MTIxOTE5Mzcx
OVowgZIxCzAJBgNVBAYTAkJSMRkwFwYDVQQIDBBESVNUUklUTyBGRURFUkFMMREw
DwYDVQQHDAhCUkFTSUxJQTE7MDkGA1UECgwyU0VSVklDTyBGRURFUkFMIERFIFBS
T0NFU1NBTUVOVE8gREUgREFET1MgKFNFUlBSTykxGDAWBgNVBAMMDyouc2VycHJv
Lmdvdi5icjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfqW4qr/6QB
gJSGcYCfWiuiO90tC64xXkZdKyGn0ql48FuLNpHIz4xp9NHxAHc6za/YDcf2nqdm
aVE7NdmgIqnugPBwXWcJywgjRGsRDYoI+16054oy0h3s0iVlcmiEjCrjaZmd7vGV
mm4UXT+vMT/1vn47Bikfzh0qROSNGSyLXksxfo3E2Hb9/itlC+Ppil3NI9W0wPb2
AauuhXR/aVrIoc/iUtH61BXEUHhwTF3TlzWpjasLCtOvEuntHdTV19F0twsC30Jr
JxVuIpLd4ACeWxWkOZyhqchNyYT0GKeTwoEgtrfpwegJhestOCKLCrqcb0DzSAS2
mnFhbv1K6hUCAwEAAaOCA3gwggN0MCkGA1UdEQQiMCCCDyouc2VycHJvLmdvdi5i
coINc2VycHJvLmdvdi5icjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYB
BQUHAwEwHQYDVR0OBBYEFP9e2lwubudaabfgcB3DynPwOzh6MGQGA1UdIARdMFsw
CAYGZ4EMAQICMEIGCisGAQQBoDIKAQIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93
d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCwYJKwYBBAGgMgEUMAwGA1Ud
EwEB/wQCMAAwgaAGCCsGAQUFBwEBBIGTMIGQMEEGCCsGAQUFBzABhjVodHRwOi8v
b2NzcC5nbG9iYWxzaWduLmNvbS9jYS9hY3NlcnByb2FyNDZvdnRsc2NhMjAyNTBL
BggrBgEFBQcwAoY/aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQv
YWNzZXJwcm9hcjQ2b3Z0bHNjYTIwMjUuY3J0MB8GA1UdIwQYMBaAFEFQmVF44XVO
wf9nFeEu0LIj1D2GMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuZ2xvYmFs
c2lnbi5jb20vY2EvYWNzZXJwcm9hcjQ2b3Z0bHNjYTIwMjUuY3JsMIIBfgYKKwYB
BAHWeQIEAgSCAW4EggFqAWgAdgCUTkOH+uzB74HzGSQmqBhlAcfTXzgCAT9yZ31V
Ny4Z2AAAAZ6O/ZIuAAAEAwBHMEUCIQCPo4gcbqJqbM8Ldd//FQu+D6TM1HwyohdG
nwyYS7lw6QIgDEayk7sdmtsQwt5F+TdNFLQq4iztdRckHJmPK5kybU4AdgDIo8R/
x7OtuTVrAT9qehJt4zpOQ6XGRvmXrTl1mR3PmgAAAZ6O/ZLeAAAEAwBHMEUCIFSx
GDF5skrwhZrxzEq3f1zCDHacjR+/mFcZxs48Ez4GAiEApkhRbr7hLN6KWJTIFEmJ
2yoKM4fVyqeDlFqID4fUTZ0AdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfA
yMVpdwAAAZ6O/ZNLAAAEAwBHMEUCIQDC3sfdu6CKTgDlpDJvqeNqQsS0Y3yw6pco
EXC1PN10iwIgD8gip50JkToeRqFGGkKdDz4PzLN9NpPfX6DypBkDwp4wDQYJKoZI
hvcNAQELBQADggEBACs88ADSbY58DVMOrsXshp1u8lt03CX+4fptKeiPGWmUICft
vlq0PcjjsHzdVOoBQJJAcMMIH6q8f+iP6nasFVVPSEf/O6Ip50g7AyFPZ66hnysp
fUErE+RlCnqJMHrnaA25uwqkSRbV0egw61dyOUVe8xsk11hNcR1bCcfnWh1BLJiF
fPl4yjJj41KujVYdgzMbhg6B2f0yvemA2lKinOMJi25sTeBKAosWquJH7fdgQdHn
Dz1EH8oFsYmoNbdC0HwcS3LhHK1drzkwHP6sJWnnthwsZbaHRoqCD2LqcSq19DUu
4VyU/dRsGUd+pWaF4PfQarmLdyACXRztFoGlEoo=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-17T17:06:46+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BR O=SERVICO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO) CN=AC SERPRO AR46 OV TLS CA 2025
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Valid from
2025-10-15T03:10:25+00:00
Expires
2030-10-15T00:00:00+00:00
Days remaining
1458
Serial (hex)
8471F46D8B7C0A0AC132A5E778727C0B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

F2:70:95:D0:B4:0D:F7:65:59:94:04:01:1C:F8:B1:67:DA:06:26:0E:81:DD:A7:27:F1:63:EF:08:22:10:71:E4
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
41:50:99:51:78:E1:75:4E:C1:FF:67:15:E1:2E:D0:B2:23:D4:3D:86
authorityKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr46 CA Issuers - URI:http://secure.globalsign.com/cacert/rootr46.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/rootr46.crl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2 Policy: 1.3.6.1.4.1.4146.1.20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Valid from
2019-03-20T00:00:00+00:00
Expires
2046-03-20T00:00:00+00:00
Days remaining
7093
Serial (hex)
11D2BBB9D723189E405F0A9D2DD0DF2567D1
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4F:A3:12:6D:8D:3A:11:D1:C4:85:5A:4F:80:7C:BA:D6:CF:91:9D:3A:5A:88:B0:3B:EA:2C:63:72:D9:3C:40:C9
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →