DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

tiktokusds.com · 129.80.23.77:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.tiktokusds.com
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Valid from
2024-05-13T00:00:00+00:00
Expires
2025-06-13T23:59:59+00:00
Days remaining
-510
Serial (hex)
0259B8718ECBBBBECCB1432C252D7C89
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.tiktokusds.com, DNS:tiktokusds.com

SHA-256 fingerprint

03:0B:20:2F:25:EC:FD:F5:4F:75:BD:AB:D5:01:56:5B:58:B4:A7:5B:CE:0D:DC:4A:F8:96:D7:4B:35:76:36:7D
Certificate extensions & PEM
authorityKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
subjectKeyIdentifier
60:BD:A7:3B:05:09:51:0D:AB:E3:DF:E2:67:4D:C6:8F:81:31:29:E7
subjectAltName
DNS:*.tiktokusds.com, DNS:tiktokusds.com
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9: 1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08 Timestamp : May 13 20:45:36.936 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:94:AA:E5:DA:25:7A:73:17:55:36:A0: C3:0B:60:09:CC:70:8F:14:84:B0:EC:7D:7F:8F:22:75: 87:3F:7E:1D:70:02:20:13:A9:CA:86:F9:47:D8:88:AB: 0C:96:54:D3:AC:28:F0:E5:C3:B9:81:E9:38:A9:10:E6: 71:14:3E:85:B6:0C:9B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0: 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8 Timestamp : May 13 20:45:36.875 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F1:DC:0B:63:9B:D0:70:52:E9:88:62: 9E:A8:27:14:B5:A3:9B:6D:B5:C4:49:03:A0:EA:B3:16: A9:3A:9B:A1:95:02:21:00:85:06:9B:B4:5D:13:EE:74: C5:57:FC:EE:79:16:35:B9:C0:40:79:4B:FA:52:4F:3C: 3D:92:C8:41:7B:15:D2:DE Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : May 13 20:45:36.897 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E1:2B:26:CE:64:B6:FA:44:F1:2B:11: BC:87:E5:72:E8:56:83:C0:29:87:ED:53:49:A1:14:A6: 3D:C2:43:F2:53:02:21:00:BC:FB:70:BE:5C:D3:BF:99: EA:9D:30:8D:2C:54:37:48:CA:F7:BA:80:B3:8C:C6:C1: DF:8E:1C:CD:BC:40:45:5F
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgIQAlm4cY7Lu77MsUMsJS18iTANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTI0MDUxMzAwMDAwMFoXDTI1MDYxMzIzNTk1OVowGzEZMBcGA1UEAwwQKi50
aWt0b2t1c2RzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCu
xrIWhxKUl2wz5Qx72/T5uGSKClmkX0QlgnuuA1t3ABQqqhCik18YgjewcxOUYoTj
AdEqMwznGCOUdiaweO4ZSZj9UUwxvBG1GmRpOykRtKOFVIIDZ6NsqZk7JKrYKMO/
wG87/eZqQngcBBFuRsqWNM3kWZYYI9aNiD8+f/baUKLksiTNeRqmimXKrTlN31Rz
s4JIV8DmlkMcOWRfxatniof/uxx+jdLic41puFF3NyR+UaIGEV35yhnA+JO/Hh47
O4dWfjkFL9gGFwXTHRRZRpCHdZPT3OAD0YpwSm3o4JHu6V4IBp1V05h/4bSWYvq1
gU2u4tUIfIiK1L1NkFECAwEAAaOCAyswggMnMB8GA1UdIwQYMBaAFJRP1F2L5KTi
poD+/dj5AO+jvgJXMB0GA1UdDgQWBBRgvac7BQlRDavj3+JnTcaPgTEp5zArBgNV
HREEJDAighAqLnRpa3Rva3VzZHMuY29tgg50aWt0b2t1c2RzLmNvbTA+BgNVHSAE
NzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNv
bS9HZW9UcnVzdFRMU1JTQUNBRzEuY3JsMHYGCCsGAQUFBwEBBGowaDAmBggrBgEF
BQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYBBQUHMAKGMmh0
dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3J0
MAwGA1UdEwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB2AM8RVu7V
Lnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABj3O0JSgAAAQDAEcwRQIhAJSq
5dolenMXVTagwwtgCcxwjxSEsOx9f48idYc/fh1wAiATqcqG+UfYiKsMllTTrCjw
5cO5gek4qRDmcRQ+hbYMmwB3AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6M
Lnm4AAABj3O0JOsAAAQDAEgwRgIhAPHcC2Ob0HBS6YhinqgnFLWjm221xEkDoOqz
Fqk6m6GVAiEAhQabtF0T7nTFV/zueRY1ucBAeUv6Uk88PZLIQXsV0t4AdwDm0jFj
QHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY9ztCUBAAAEAwBIMEYCIQDh
KybOZLb6RPErEbyH5XLoVoPAKYftU0mhFKY9wkPyUwIhALz7cL5c07+Z6p0wjSxU
N0jK97qAs4zGwd+OHM28QEVfMA0GCSqGSIb3DQEBCwUAA4IBAQAYj7Saj3hmSlv3
QB2Oz98qAFX6l2f8HAX8LXLI70go+zmVNwY56I6rmyccJ7sQowTCYYGIy3wmvRB5
3jiDC7/ejaVYjALLeOUFbdXvHfRDC243xyFMPhARzBeVJ9LRmYzFNgki2u9oiAOc
yB+qFmcWlbpQ0RzQiVwxj654j+IzKrH0QUn4N7/10qq47pz75QbS6Ns9uxcqYUBi
yu+yEMAdyDoSAk5iUW5xuESmMZ8QoMDIZCSAwkNlCjycGYgjj85bmeDpFu6WRmg3
S0AYCnLUKT9EFQ22iHZN1ALfczP0WVYFbw7L2JUFPb02vv8g/rBsLrOqEB99W62Y
x7GHG+ml
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-11-05T17:31:53+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:23:37+00:00
Expires
2027-11-02T12:23:37+00:00
Days remaining
361
Serial (hex)
0D07782A133FC6F9A57296E131FFD179
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
Certificate extensions & PEM
subjectKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →