DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

state.ct.us · 159.247.4.126:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=Connecticut O=State of Connecticut CN=www.ct.gov
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2026-10-01T00:00:00+00:00
Expires
2027-04-17T23:59:59+00:00
Days remaining
184
Serial (hex)
C0847C81D964B503551644F6E2C43133
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.ct.gov, DNS:access.state.ct.us, DNS:analytics.ct.gov, DNS:babybonds.ct.gov, DNS:beapollworker.ct.gov, DNS:catalog.state.ct.us, DNS:cidverifylicense.ct.gov, DNS:civicsforlife.ct.gov, DNS:core-ct.state.ct.us, DNS:covid19-contact.ct.gov, DNS:covidvaccinefinder.ct.gov, DNS:cspsandyhookreport.ct.gov, DNS:ct-events.ct.gov, DNS:ct.gov, DNS:ctalert.gov, DNS:depdata.ct.gov, DNS:dir.ct.gov, DNS:dmvct.state.ct.us, DNS:dotdata.ct.gov, DNS:dpsdata.ct.gov, DNS:internships.ct.gov, DNS:ipm.caes.ct.gov, DNS:laptopconnect.ct.gov, DNS:myvote.ct.gov, DNS:nextgenelections.ct.gov, DNS:ocsurvey.ct.gov, DNS:oer.ct.gov, DNS:ohe.ct.gov, DNS:osc-static.ct.gov, DNS:ott.ct.gov, DNS:portaldir.ct.gov, DNS:powerofcivics.ct.gov, DNS:preventhumantrafficking.ct.gov, DNS:reopen.ct.gov, DNS:services.caes.ct.gov, DNS:state.ct.us, DNS:text911.ct.gov, DNS:veterans.ct.gov, DNS:volunteer.ct.gov, DNS:voter-privacy-program.ct.gov, DNS:wcc.state.ct.us, DNS:workinparks.ct.gov, DNS:workoutdoors.ct.gov, DNS:workoutside.ct.gov, DNS:www.access.state.ct.us, DNS:www.catalog.state.ct.us, DNS:www.cidverifylicense.ct.gov, DNS:www.core-ct.state.ct.us, DNS:www.cspsandyhookreport.ct.gov, DNS:www.ctalert.gov, DNS:www.depdata.ct.gov, DNS:www.dir.ct.gov, DNS:www.dmvct.state.ct.us, DNS:www.dotdata.ct.gov, DNS:www.dpsdata.ct.gov, DNS:www.i95newhaven.ct.gov, DNS:www.ipm.caes.ct.gov, DNS:www.oer.ct.gov, DNS:www.ohe.ct.gov, DNS:www.ott.ct.gov, DNS:www.services.caes.ct.gov, DNS:www.state.ct.us, DNS:www.veterans.ct.gov, DNS:www.wcc.state.ct.us

SHA-256 fingerprint

2A:29:64:16:5A:D4:26:10:2E:59:78:3E:0C:ED:4C:C0:A6:1A:5B:9B:2F:25:9D:C7:0C:06:2B:A1:B4:BF:9A:A3
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
CD:19:CB:94:01:B1:E7:66:6B:81:A9:FE:6D:E8:8C:58:AC:64:74:6A
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:www.ct.gov, DNS:access.state.ct.us, DNS:analytics.ct.gov, DNS:babybonds.ct.gov, DNS:beapollworker.ct.gov, DNS:catalog.state.ct.us, DNS:cidverifylicense.ct.gov, DNS:civicsforlife.ct.gov, DNS:core-ct.state.ct.us, DNS:covid19-contact.ct.gov, DNS:covidvaccinefinder.ct.gov, DNS:cspsandyhookreport.ct.gov, DNS:ct-events.ct.gov, DNS:ct.gov, DNS:ctalert.gov, DNS:depdata.ct.gov, DNS:dir.ct.gov, DNS:dmvct.state.ct.us, DNS:dotdata.ct.gov, DNS:dpsdata.ct.gov, DNS:internships.ct.gov, DNS:ipm.caes.ct.gov, DNS:laptopconnect.ct.gov, DNS:myvote.ct.gov, DNS:nextgenelections.ct.gov, DNS:ocsurvey.ct.gov, DNS:oer.ct.gov, DNS:ohe.ct.gov, DNS:osc-static.ct.gov, DNS:ott.ct.gov, DNS:portaldir.ct.gov, DNS:powerofcivics.ct.gov, DNS:preventhumantrafficking.ct.gov, DNS:reopen.ct.gov, DNS:services.caes.ct.gov, DNS:state.ct.us, DNS:text911.ct.gov, DNS:veterans.ct.gov, DNS:volunteer.ct.gov, DNS:voter-privacy-program.ct.gov, DNS:wcc.state.ct.us, DNS:workinparks.ct.gov, DNS:workoutdoors.ct.gov, DNS:workoutside.ct.gov, DNS:www.access.state.ct.us, DNS:www.catalog.state.ct.us, DNS:www.cidverifylicense.ct.gov, DNS:www.core-ct.state.ct.us, DNS:www.cspsandyhookreport.ct.gov, DNS:www.ctalert.gov, DNS:www.depdata.ct.gov, DNS:www.dir.ct.gov, DNS:www.dmvct.state.ct.us, DNS:www.dotdata.ct.gov, DNS:www.dpsdata.ct.gov, DNS:www.i95newhaven.ct.gov, DNS:www.ipm.caes.ct.gov, DNS:www.oer.ct.gov, DNS:www.ohe.ct.gov, DNS:www.ott.ct.gov, DNS:www.services.caes.ct.gov, DNS:www.state.ct.us, DNS:www.veterans.ct.gov, DNS:www.wcc.state.ct.us
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Oct 1 14:20:50.593 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:68:B8:02:70:64:DD:CD:51:A3:FA:AE:F0: F9:76:C1:28:79:D3:E5:9B:F0:F1:9F:91:6F:E2:D4:C8: D3:CC:65:CA:02:21:00:C7:4B:33:03:48:4E:F1:45:38: 15:A6:D0:EE:83:CC:86:18:6A:BC:80:02:94:E1:37:38: 78:CB:4E:CB:39:16:5C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Oct 1 14:20:50.777 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:88:5C:64:2E:7B:00:B6:7E:F3:94:EE: 2F:72:7B:8E:CD:05:7F:EB:42:1C:47:18:6C:B1:BE:AB: A1:88:7B:95:8B:02:21:00:C4:30:30:09:6B:1C:D9:65: BB:B3:9D:A9:1B:6F:89:97:CD:01:14:FF:A8:32:43:5B: AE:26:B1:CB:01:CD:04:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Oct 1 14:20:51.266 2026 GMT Extensions: 00:00:05:00:06:33:B0:B9 Signature : ecdsa-with-SHA256 30:45:02:21:00:DE:BD:62:07:8B:59:F4:80:AB:C7:BC: 05:56:A3:D4:A7:D1:4B:48:FC:2E:BC:75:91:46:79:F4: D2:1D:28:12:20:02:20:76:C7:7F:A6:2A:59:9C:1A:18: C3:C4:C4:90:97:2B:C5:31:65:5F:13:EE:EF:96:73:DD: 94:75:D5:1D:7B:21:BE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-15T10:27:16+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3445
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4113
Serial (hex)
D27FBBC1DE359E5216AD6149586099C4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw
gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx
MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV
BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy
dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct
pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB
fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ
SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR
8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34
MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm
tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo
iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik
yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE
cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr
+vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA
AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud
DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T
AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g
BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy
dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1
BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz
dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0
S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24
RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ
uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP
q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae
QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1
VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb
9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH
Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E
oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU
bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2
Rnnyp58XRStJ
-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4113
Serial (hex)
01FD6D30FCA3CA51A81BBC640E35032D
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
Certificate extensions & PEM
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →