DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

sgix.sg · 192.124.249.114:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=sgix.sg
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Valid from
2026-08-14T21:20:14+00:00
Expires
2026-11-12T21:20:14+00:00
Days remaining
51
Serial (hex)
6F5365CBED0E0E2B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.sgix.sg, DNS:sgix.sg

SHA-256 fingerprint

27:45:1F:90:6F:A8:04:E7:9F:E3:11:A8:FD:F4:13:2D:33:45:C5:74:45:B1:07:6F:AD:3A:78:AB:7C:C4:1C:32
Certificate extensions & PEM
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
keyUsage
Digital Signature, Key Encipherment
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfr1v1dv_s1-1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.16.840.1.114414.1.7.23.1 CPS: http://certificates.starfieldtech.com/repository/
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_issuing_dv-r1v1.crt OCSP - URI:http://ocsp.starfieldtech.com/
authorityKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
subjectAltName
DNS:www.sgix.sg, DNS:sgix.sg
subjectKeyIdentifier
A4:D8:97:AF:65:39:91:4C:E3:FD:7D:C2:2B:CC:4F:2B:25:B5:14:DE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Aug 14 21:20:15.232 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:3B:68:6E:FA:06:76:14:F7:33:ED: 3F:52:3B:62:BA:48:7C:60:9C:C9:19:7D:B7:BA:19:67: 37:F8:8D:5F:A3:02:20:47:4B:31:22:12:E5:A0:5F:9C: 51:7D:7D:5B:70:B7:8A:4B:E0:D1:D0:6F:30:49:77:5F: E0:50:58:D0:FF:22:5B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Aug 14 21:20:15.471 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:56:E3:18:F5:4B:5B:E5:EC:72:1D:79:A2: 55:E4:8E:0E:77:EE:9B:A4:51:42:CF:F4:1B:32:C0:F5: AC:12:44:DB:02:20:1B:80:F8:3E:DD:3C:1B:B8:3E:11: DC:8A:93:00:FE:E1:5F:73:FB:AD:21:DF:2D:9E:10:33: A2:B0:61:4F:31:68 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Aug 14 21:20:15.673 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4E:13:89:F5:EC:1A:6F:3B:83:E2:3D:B3: C1:83:09:47:D6:C2:3E:46:34:58:15:36:01:14:BB:1B: 9B:5F:6A:6C:02:20:06:3E:8D:69:64:12:AD:3E:CD:8A: 13:75:59:19:FB:DC:77:F9:10:D2:66:5F:0F:36:97:E3: F4:27:5A:C3:81:B9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T09:13:47+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Valid from
2025-08-27T12:00:00+00:00
Expires
2040-08-23T11:59:59+00:00
Days remaining
5084
Serial (hex)
C5E225A10DF67804EC5305DCF38E5234
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

06:89:1C:34:A2:E4:68:7C:63:0B:29:85:0C:C9:F6:D4:5D:ED:39:49:1C:F8:77:C7:24:6B:6E:C6:33:58:7A:2C
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
authorityKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_root-r1.crt
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sf_tls_root-r1.crl 
-----BEGIN CERTIFICATE-----
MIIGdTCCBF2gAwIBAgIRAMXiJaEN9ngE7FMF3POOUjQwDQYJKoZIhvcNAQELBQAw
UzELMAkGA1UEBhMCVVMxHzAdBgNVBAoTFlN0YXJmaWVsZCBUZWNobm9sb2dpZXMx
IzAhBgNVBAMTGlN0YXJmaWVsZCBUTFMgUm9vdCBDQSAtIFIxMB4XDTI1MDgyNzEy
MDAwMFoXDTQwMDgyMzExNTk1OVowYDELMAkGA1UEBhMCVVMxHzAdBgNVBAoTFlN0
YXJmaWVsZCBUZWNobm9sb2dpZXMxMDAuBgNVBAMTJ1N0YXJmaWVsZCBUTFMgSW50
ZXJtZWRpYXRlIENBIERWIC0gUjF2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBALmrvGr2ijBCQr15BmW+jrG+tZawnVhNGZFPMqBWtrtXhVhCeTV6Xu/1
nDMyycWnFBxhxhpec+ezueXyQqGP3beodphV0+hSgA3pdgp7rdUsitrrYZAu8LAx
X7QFzXlidfH0Suhlcrsq2PVxqduaZLVjqMNkiVpo3T3YRqSwAPlRcGElcauGwv1i
Cw+qytGmRGrb0lzpKdjChkeHq03SM+dX4E98/SSO/+OeXfmcVYKG3uKM4e8CWUgn
Tu+nP6xJgSyLHdDnXoJWeJCp+UvSFk8VvdEEkrC2p/oG/06XIi4H1swh9XbUnyJf
Sgcz3lmtM7HTEc8GrbccTsvNODzJweaPLMv+zjLXekcWFtAjgW+FSO4hqwDIcQAI
JE9yn/EBmE8M734tcCfr06q++nlhQqA086UPmorEuWd0u/gMyJMi2zFfCpzv5/yz
6KciPcd/i7//L1GN3PL5Y+WUxo/GfS8ZhNbaXEmBPYS6rEiD92CuoPcM/C3Hljwq
is1Mf5eMoLuwi1fMH3r5iuOPnHeYUWFJq8qm1ZhY0lYw/ehXbO7/GU6p7ck+ThDY
sRdnowTWxeGedVexHhy3xnaLNoKtQ12jRHZjesMBNhDK9IpvvkPLEWxcYr4WSHzr
3oXc40Z3FTb9nHvre8eXJy3plI8u9OUOrc7v5Cr61j32eDhqsWaNAgMBAAGjggE1
MIIBMTAOBgNVHQ8BAf8EBAMCAYYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwEgYDVR0T
AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUmbRt3Y0MbfotoJ8iIehzwhi8hdkwHwYD
VR0jBBgwFoAUZXmmW82bBxalQIa3SY4iR8YL3kswXwYIKwYBBQUHAQEEUzBRME8G
CCsGAQUFBzAChkNodHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29t
L3JlcG9zaXRvcnkvc2ZfdGxzX3Jvb3QtcjEuY3J0MBMGA1UdIAQMMAowCAYGZ4EM
AQIBMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9jcmwuc3RhcmZpZWxkdGVjaC5j
b20vc2ZfdGxzX3Jvb3QtcjEuY3JsMA0GCSqGSIb3DQEBCwUAA4ICAQBix5GX3AW/
uhPlLjxc1fkcV3kLc7ZBpf7ApTq2nD9noO9pDhjOXzUrRRzUI3lSgT6EUIm77eVt
CGHKh9xzrrvyqaKI2Szlcn0zs4ys/6N0rdCFygmr6P/s6uavHwfoBkH7PKuogSHW
rc8WK5U41hFKYjU1xuxePvXKDUQtdW/jQCcLwcds1hkjdrWXATHcL+YTb7Kl2zTQ
uzFfuW1eKa5W0V/ftoh4r1JJl+sU61nsuOAWVeVIjm4PCmVzBPqs8//D4sWaPurS
a5/gEUNw0bxTZsYZVSaAO3iGxvzYlmPC1m9ja+odus6IIUpNUAxhKt3gP+tCK4og
ltuTnopStKEwaqQhtOSrvUSWEae/4g8MpBA1NyVui2IikPd0qHNy/z90K1JlAVgr
JhEOR8X9VIbdI7jQIM40jAT4qYnmBaZ58/MEifm6yyk282QLeY/TEFQKRQKXGZdm
tLHQJA6593R30PuBYsuzE0geX71eum/QCTImiAdUWlDPmfnTBZ5Im7eDWg/4tibj
MKzmt0OCUp+Cuduynlxp/HPyxUKtXZUn2f34RKOqpO75Gof08DUhhTwNY/MJ0kjl
8oXScJvIVhApiQ/S+USkxNVGKSUxw3ge5RdSNBWXHXVmbE4fnn7iknIZxaeqxQF2
3oi6BiMgFaiJ2GSJEQnwcKcZ01WQ6lGOeQ==
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2025-09-24T12:00:00+00:00
Expires
2037-12-31T23:59:59+00:00
Days remaining
4118
Serial (hex)
466702AA31941FA2C196EFE6D09BAF6C
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

26:A9:3D:60:03:90:77:65:4C:0D:DA:1F:B6:34:AF:5F:F5:C1:14:C7:AC:1F:D0:44:9B:1C:9D:21:78:B0:28:FF
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE
subjectKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl 
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIQRmcCqjGUH6LBlu/m0JuvbDANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0
c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAw
BgNVBAMTKVN0YXJmaWVsZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcy
MB4XDTI1MDkyNDEyMDAwMFoXDTM3MTIzMTIzNTk1OVowUzELMAkGA1UEBhMCVVMx
HzAdBgNVBAoTFlN0YXJmaWVsZCBUZWNobm9sb2dpZXMxIzAhBgNVBAMTGlN0YXJm
aWVsZCBUTFMgUm9vdCBDQSAtIFIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAvNSD5nT/Q7nsKjT/WYTPv9vp1eACaDM7U4cR+DCt3Yz6QOwbKDTwZ+io
/BNbbGGqtngcDUCnBV4lPAAwR886ypU3WANZIVp14WteQ+2rNMghRx/4+LkzxOMq
x7uvTkA87NU5vqOzpWtpNiXvt+DSGrFAJDyah2ia9fbS2ActrWWsBsThFt3cTHNi
xySEl8frlFP3qvWz0BaxOuNRbdSR/EQLA+FNkNt3zge5IESie/oIWGgHepNGb6Oa
G3xhmJSg0JHrreLsFwyIuLkYYzQBACiDNWZsfCjcJzbjOobq+qT/HUhnspbZMsHg
JiVVrfEy6P/DWeBKEFdjHTkUsmvVa9mNOAhxDjq5RmjdvqEjJP8uIC53qDQeVbc7
II+2LaSzPjUGN28f/HfSBpec/4sfkd6Ubw1SbP9Zq8pBlnJKznU9Muh8RXuRQJoE
tLJW0tGvHsnry4g9M3VjZ2YWJb2FHEFeIqaqg/uUZH6BmkheWkekRx48CXc/aaav
ozY60UE6tOsoRtb2czYvSVSG0eatB470klhV4aOktAe5LeWbxEq97mqbXh6iN2R4
v7wgw0W/UF+s6rBwt8+XAdUUMYoZUFwJvu3N/Xj8pxIWMDalWTgD/30DPuMGIT7T
CXYl6bVUkgCG9D0C+e7TY8AkHgWI8UGsH/iFWyQWQUJN9C6g3ysCAwEAAaOCATsw
ggE3MA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDATAPBgNVHRMB
Af8EBTADAQH/MB0GA1UdDgQWBBRleaZbzZsHFqVAhrdJjiJHxgveSzAfBgNVHSME
GDAWgBR8DDIfp9kwf8R9aKNiqKHOqwdbJzBaBggrBgEFBQcBAQROMEwwSgYIKwYB
BQUHMAKGPmh0dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVw
b3NpdG9yeS9zZnJvb3QtZzIuY3J0MCYGA1UdIAQfMB0wCAYGZ4EMAQIBMAgGBmeB
DAECAjAHBgVngQwBATA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnN0YXJm
aWVsZHRlY2guY29tL3Nmcm9vdC1nMi5jcmwwDQYJKoZIhvcNAQELBQADggEBALhF
42TCewfSOa+2nSV2OzCt7A+n9KJ/6Y8F5PXW++VpYZVWy6kZMrJlDus7K3oACiKE
R+Id7BldmcKxWSw6UeKOQ74DhDTJf+KTDubHDhoCHnK1d2XWJ2W+rOacLfVnvHAv
HBsLeOP6xRT4E+5zdtpnjdW/JSEeLEGETUmEkOvoJIWQptQ2AxIuEIP3FsRneiLZ
SDOyjvtLMOe3a2q8xmiOxTlqi9QmwTV/9IfoDoqsg1C5YL4eiD0xRc1m6NvecSEW
jHIMyCiFWlzO3faUOm067YthhZwzjYLghIra11NvVpsWEgpiGPBhd2UN7nGn1M0j
dZT7YeQWOBjip238/4o=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →