DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

tiktok.com · 2.21.23.217:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.tiktok.com
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS ECC CA G1
Valid from
2026-05-19T00:00:00+00:00
Expires
2026-12-03T23:59:59+00:00
Days remaining
28
Serial (hex)
0E7C96116B867364A4D12FB5781DF2E6
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.tiktok.com, DNS:tiktok.com

SHA-256 fingerprint

05:B2:3F:E8:A1:ED:CE:46:2F:23:17:84:3D:34:79:DF:7B:99:43:04:87:15:44:9D:20:43:54:12:03:0F:92:E5
Certificate extensions & PEM
authorityKeyIdentifier
41:DF:4D:F0:61:93:C7:FC:B5:AB:CD:7C:92:02:9D:0F:7C:9C:0A:90
subjectKeyIdentifier
2A:31:E7:4C:0C:50:7B:4C:D5:8E:C4:B8:77:A9:07:80:2A:E2:AC:0D
subjectAltName
DNS:*.tiktok.com, DNS:tiktok.com
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.rapidssl.com/RapidSSLTLSECCCAG1.crl
authorityInfoAccess
OCSP - URI:http://status.rapidssl.com CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSECCCAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : May 19 07:42:09.076 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:56:97:20:8D:C7:C7:20:78:BC:47:5C:23: E6:EE:0D:81:2F:58:18:CC:50:23:28:DC:C7:8A:CD:AD: 9B:CB:BC:41:02:21:00:FC:12:A3:68:0A:BF:00:AE:A6: 51:42:85:79:A5:EA:27:03:41:6A:63:8E:DB:B3:82:C0: 9C:81:4C:35:96:19:17 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : May 19 07:42:09.069 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:28:16:B9:F3:F4:13:EB:68:3B:9C:8B:57: 55:9F:C1:8B:4F:2B:C1:C4:72:BF:23:8C:97:52:11:D9: 24:DA:BA:91:02:20:06:F6:23:2B:FC:50:52:F3:DC:11: 85:18:65:B6:03:3D:7F:3F:77:CF:9C:4B:93:3A:88:5B: C7:3B:73:86:CA:90 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : May 19 07:42:09.084 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0E:8C:EC:97:28:64:1E:E6:87:DE:36:98: 5F:AA:00:F5:99:AC:71:7E:43:30:36:EC:FE:F8:D0:C1: 20:6B:31:C2:02:21:00:CD:B5:52:0C:71:50:AD:E8:06: AD:88:49:5D:F8:3C:CF:50:95:B0:5E:A5:93:BB:3F:67: A8:46:13:5E:20:44:50
-----BEGIN CERTIFICATE-----
MIIEjjCCBDOgAwIBAgIQDnyWEWuGc2Sk0S+1eB3y5jAKBggqhkjOPQQDAjBgMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
ZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgRUNDIENBIEcxMB4X
DTI2MDUxOTAwMDAwMFoXDTI2MTIwMzIzNTk1OVowFzEVMBMGA1UEAwwMKi50aWt0
b2suY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEMiIyr+7IagtcXxuT1Qcu
qYPHZVhd0/Mc/Y2KyXmdgnMXlSgAPexB+km9A+4zlOS9Uk8RmMtg7Ygh23Li7JFT
oaOCAxYwggMSMB8GA1UdIwQYMBaAFEHfTfBhk8f8tavNfJICnQ98nAqQMB0GA1Ud
DgQWBBQqMedMDFB7TNWOxLh3qQeAKuKsDTAjBgNVHREEHDAaggwqLnRpa3Rvay5j
b22CCnRpa3Rvay5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAT
BgNVHSUEDDAKBggrBgEFBQcDATA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2Rw
LnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU0VDQ0NBRzEuY3JsMHYGCCsGAQUFBwEB
BGowaDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20wPgYI
KwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRM
U0VDQ0NBRzEuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSC
AWkBZwB2AMIxfldFGaNF7n843rKQQevHwiFaIr9/1bWtdprZDlLNAAABnj8vXLQA
AAQDAEcwRQIgVpcgjcfHIHi8R1wj5u4NgS9YGMxQIyjcx4rNrZvLvEECIQD8EqNo
Cr8ArqZRQoV5peonA0FqY47bs4LAnIFMNZYZFwB1ANgJVTuUT3r/yBYZb5RPhauw
+Pxeh1UmDxXRLnK7RUsUAAABnj8vXK0AAAQDAEYwRAIgKBa58/QT62g7nItXVZ/B
i08rwcRyvyOMl1IR2STaupECIAb2Iyv8UFLz3BGFGGW2Az1/P3fPnEuTOohbxztz
hsqQAHYAlE5Dh/rswe+B8xkkJqgYZQHH0184AgE/cmd9VTcuGdgAAAGePy9cvAAA
BAMARzBFAiAOjOyXKGQe5ofeNphfqgD1maxxfkMwNuz++NDBIGsxwgIhAM21Ugxx
UK3oBq2ISV34PM9QlbBepZO7P2eoRhNeIERQMAoGCCqGSM49BAMCA0kAMEYCIQDq
HELFrBZSRbuoq1GuRmd2pfGElRwT8yh/je5/GxuUvQIhAM2UE98RQQHK+vfy/wh5
euZrXz6M0vrpMQ3kjpWWeaL3
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-05T22:03:35+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS ECC CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2017-11-02T12:59:58+00:00
Expires
2027-11-02T12:59:58+00:00
Days remaining
361
Serial (hex)
0DED78965349B368D41F7EE3E1EED1EB
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FC:16:D5:32:03:BD:91:87:D6:9C:C9:9D:2D:A5:51:07:6B:4D:CB:29:81:40:D6:75:1F:7A:01:29:66:C9:9F:DD
Certificate extensions & PEM
subjectKeyIdentifier
41:DF:4D:F0:61:93:C7:FC:B5:AB:CD:7C:92:02:9D:0F:7C:9C:0A:90
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.1.1 CPS: https://www.digicert.com/CPS Policy: 2.16.840.1.114412.1.2 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4088
Serial (hex)
055556BCF25EA43535C3A40FD5AB4572
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →