THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

smtp.bjerkerud.com · 52.72.253.236:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.bjerkerudmail.com
Issuer
C=US O=Let's Encrypt CN=E8
Valid from
2026-03-21T01:04:21+00:00
Expires
2026-06-19T01:04:20+00:00
Days remaining
-117
Serial (hex)
0609BE7A2C4E0B6C97CD24A3BFC877AC68E4
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.bjerkerudmail.com, DNS:bjerkerudmail.com

SHA-256 fingerprint

B3:83:C2:76:70:51:01:D2:88:F7:25:CC:80:BE:0B:D5:F4:37:58:79:DB:8B:08:21:CF:D4:26:41:74:15:31:45
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
98:43:86:CB:A1:63:D8:20:A7:1A:CD:37:60:D6:5D:72:C8:3D:4E:51
authorityKeyIdentifier
8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA
authorityInfoAccess
CA Issuers - URI:http://e8.i.lencr.org/
subjectAltName
DNS:*.bjerkerudmail.com, DNS:bjerkerudmail.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://e8.c.lencr.org/101.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Mar 21 02:02:51.753 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:09:D3:79:28:AE:0E:28:1A:65:09:45:84: 52:F9:92:1B:16:F5:3F:A9:AF:EA:5C:EA:CB:66:4C:BB: 24:9C:DD:52:02:20:64:FA:9D:4E:CB:64:26:FD:08:EC: 20:0E:C5:F3:20:8C:97:35:0A:1D:6C:CD:F2:6F:82:16: 59:99:1B:F9:DC:99 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : Mar 21 02:02:52.151 2026 GMT Extensions: 00:00:05:00:03:CC:42:E6 Signature : ecdsa-with-SHA256 30:46:02:21:00:D7:FA:2A:8F:4B:B5:38:80:8B:45:73: 26:61:6D:0E:A7:EB:39:D9:2E:31:6D:C6:6A:46:F1:13: E9:50:1B:5D:32:02:21:00:F7:DA:53:CC:63:A0:CF:0C: 52:D6:D2:9B:23:80:CA:A9:BA:42:BC:57:CE:29:58:0D: CA:53:35:4A:B8:D9:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-13T09:12:24+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=E8
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
150
Serial (hex)
63959363C24E7082715918BFC3D7ED56
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

83:62:4F:D3:38:C8:D9:B0:23:C1:8A:67:CB:7A:9C:05:19:DA:43:D1:17:75:B4:C6:CB:DA:D4:5C:3D:99:7C:52
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →