DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

sp.gov.br · 45.223.122.140:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=SAO PAULO L=TABOAO DA SERRA O=PRODESP CN=www.sp.gov.br
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2026-01-12T16:51:05+00:00
Expires
2027-02-13T16:51:04+00:00
Days remaining
140
Serial (hex)
121C35089BF1E2D841415002
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.sp.gov.br, DNS:sp.gov.br

SHA-256 fingerprint

D3:A1:8B:C2:A0:F9:EC:9A:64:38:98:2C:2C:FF:E4:24:DE:7A:AE:60:45:5B:FD:9C:B5:CC:4C:66:11:77:2D:7E
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
subjectAltName
DNS:www.sp.gov.br, DNS:sp.gov.br
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
35:68:CD:71:4B:3A:64:91:71:86:4D:9D:37:E2:45:07:BC:5F:BB:27
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 12 16:51:09.831 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:30:F5:71:A9:E7:44:6D:04:D5:C9:EA:C2: CC:8A:AC:65:F6:B3:02:EB:BA:36:E5:3E:E6:67:1B:2C: F6:DF:4C:6A:02:20:23:87:DB:21:DE:B5:3E:35:C9:B5: 64:A6:87:F4:0B:2C:5E:0D:01:8F:0D:2E:12:BD:15:2D: 5A:FF:A6:33:BD:99 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 12 16:51:09.043 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A9:69:59:52:59:5C:1D:62:BA:5E:67: 4D:A0:2E:6A:BF:84:78:AB:F6:E1:92:F6:66:54:D0:4B: BD:AD:17:A5:A6:02:20:5C:91:93:C7:30:3C:6D:3E:0E: 21:08:54:EA:1A:B4:F2:A0:4D:5D:3D:18:6E:97:97:B9: D0:A3:1C:CE:57:B0:B5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 12 16:51:09.998 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C4:56:D7:F3:75:70:23:C8:F5:F1:23: 3E:2D:EE:C9:0D:A2:09:A9:31:7B:12:93:42:8D:A3:4C: E8:ED:4B:45:F7:02:20:21:1D:D2:47:25:03:81:10:27: 5D:08:3F:AA:64:F7:F9:29:67:3F:36:EB:70:8B:61:61: 47:7D:8C:27:0D:94:65
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIMEhw1CJvx4thBQVACMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNjAxMTIxNjUxMDVaFw0y
NzAyMTMxNjUxMDRaMGUxCzAJBgNVBAYTAkJSMRIwEAYDVQQIEwlTQU8gUEFVTE8x
GDAWBgNVBAcTD1RBQk9BTyBEQSBTRVJSQTEQMA4GA1UEChMHUFJPREVTUDEWMBQG
A1UEAxMNd3d3LnNwLmdvdi5icjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMge0TkLSD35i0YTnWKka3h9vZACkhNp5uXUdVo2vhCOGr4R8rJn002XtAsg
pupVA0kz/XljY1AOtm47po0M5wcccpxSEV3ZPsavbgslGrVOkv4E74yQ+GBebQew
YlDfLEDAj59o6sfs34NnckSyuOMRKrF4613Oyxh3VuV7eIa5q+AKT8RcYTACihSo
yp/gClRmaisbOorO9mAaKohZBwV81jKkn1wOLoSdBEDGkoGINLlW4mVdF7gQ/8VF
KfwMHg52A6vqe4EXGG2Lc2uVDCGpxDEl16eGxJqGR6RyVVL1xcCaoIK19uo3lno2
G4YeY5cU83DC7QKe8K25/wBDY1UCAwEAAaOCAxAwggMMMA4GA1UdDwEB/wQEAwIF
oDAMBgNVHRMBAf8EAjAAMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjho
dHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2Ey
MDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20v
Z3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAI
BgZngQwBAgIwIwYDVR0RBBwwGoINd3d3LnNwLmdvdi5icoIJc3AuZ292LmJyMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhn
qN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUNWjNcUs6ZJFxhk2dN+JFB7xfuycwggF9
BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AByfaCzp+vBFaVD4G5aKh93bMhDYTObI
suOCUkrEz1mfAAABm7MeW4cAAAQDAEYwRAIgMPVxqedEbQTVyerCzIqsZfazAuu6
NuU+5mcbLPbfTGoCICOH2yHetT41ybVkpof0CyxeDQGPDS4SvRUtWv+mM72ZAHYA
TGPcmOWcHauI9h6KPd6uj6tEozd7X5uUw/uhnPzBviYAAAGbsx5YcwAABAMARzBF
AiEAqWlZUllcHWK6XmdNoC5qv4R4q/bhkvZmVNBLva0XpaYCIFyRk8cwPG0+DiEI
VOoatPKgTV09GG6Xl7nQoxzOV7C1AHYAYEyar3p/d18B1Ab8kg3ImesLHH34yVIb
+voXdzuXi8kAAAGbsx5cLgAABAMARzBFAiEAxFbX83VwI8j18SM+Le7JDaIJqTF7
EpNCjaNM6O1LRfcCICEd0kclA4EQJ10IP6pk9/kpZz8263CLYWFHfYwnDZRlMA0G
CSqGSIb3DQEBCwUAA4IBAQAVPFPy9MWlnoBQ0grf0uICEGpEpaDNt24blAiowH6F
TgxHtXrNIeBMGzE7dbAMBimhA9eHtfXRWSNvKMmsjbsQI7q8EJFA2R2Mkc8WtidG
JxuI9qyQncskkRVDcu4bpniZ+B9OYU1VmkKZlRgWnORBi2yAx2PSvfA/IW+iODlQ
RTG8njzT+YXWLXwjltQO4bcbU0ei90hUkGHhcJ8CEIoYrz1do5KMU98wkK7IGL0G
nuIr5d/1FWUCi8rX/LMfsFv503/Svn8J6FdPSikJoikZzvATh6wnSvY6uMWAjQe+
tFX0YulPzr75WaO4iy4VdVhhuw2HLrnzaZYMYb6eqOcu
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-26T07:17:14+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
786
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fIh38YjvUMzqFVzANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xODExMjEwMDAwMDBaFw0yODEx
MjEwMDAwMDBaMFAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52
LXNhMSYwJAYDVQQDEx1HbG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdaydUMGCEAI9WXD+uu3Vxoa2uP
UGATeoHLl+6OimGUSyZ59gSnKvuk2la77qCk8HuKf1UfR5NhDW5xUTolJAgvjOH3
idaSz6+zpz8w7bXfIa7+9UQX/dhj2S/TgVprX9NHsKzyqzskeU8fxy7quRU6fBhM
abO1IFkJXinDY+YuRluqlJBJDrnw9UqhCS98NE3QvADFBlV5Bs6i0BDxSEPouVq1
lVW9MdIbPYa+oewNEtssmSStR8JvA+Z6cLVwzM0nLKWMjsIYPJLJLnNvBhBWk0Cq
o8VS++XFBdZpaFwGue5RieGKDkFNm5KQConpFmvv73W+eka440eKHRwup08CAwEA
AaOCASkwggElMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdDgQWBBT473/yzXhnqN5vjySNiPGHAwKz6zAfBgNVHSMEGDAWgBSP8Et/qC5F
JK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAroCmgJ4Yl
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJmQyC1fQorUC2bbmANz
EdSIhlIoU4r7rd/9c446ZwTbw1MUcBQJfMPg+NccmBqixD7b6QDjynCy8SIwIVbb
0615XoFYC20UgDX1b10d65pHBf9ZjQCxQNqQmJYaumxtf4z1s4DfjGRzNpZ5eWl0
6r/4ngGPoJVpjemEuunl1Ig423g7mNA2eymw0lIYkN5SQwCuaifIFJ6GlazhgDEw
fpolu4usBCOmmQDo8dIm7A9+O4orkjgTHY+GzYZSR+Y0fFukAj6KYXwidlNalFMz
hriSqHKvoflShx8xpfywgVcvzfTO3PYkz6fiNJBonf6q8amaEsybwMbDqKWwIX7e
SPY=
-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2009-03-18T10:00:00+00:00
Expires
2029-03-18T10:00:00+00:00
Days remaining
904
Serial (hex)
04000000000121585308A2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3B
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-----BEGIN CERTIFICATE-----
MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG
A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8
RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT
gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm
KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd
QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ
XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o
LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU
RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp
jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK
6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX
mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs
Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH
WD9f
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →