DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

tjgo.jus.br · 104.18.10.53:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BR ST=Goiás O=Tribunal de Justiça do Estado de Goiás CN=*.tjgo.jus.br
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV E36
Valid from
2026-10-12T00:00:00+00:00
Expires
2027-04-21T23:59:59+00:00
Days remaining
167
Serial (hex)
A5724E2FD1478958DB97C60C285A0C76
Signature
ecdsa-with-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:*.tjgo.jus.br, DNS:tjgo.jus.br

SHA-256 fingerprint

07:CC:64:DA:A4:B9:DB:06:2F:D6:CC:9E:22:02:F3:48:35:3F:AF:91:B3:F7:CD:3C:9C:B5:3A:C6:AE:85:5A:DE
Certificate extensions & PEM
authorityKeyIdentifier
4C:38:7A:25:34:6B:FD:F9:8F:1A:60:1C:92:71:AA:67:F9:82:37:EB
subjectKeyIdentifier
2C:B8:5D:53:8C:31:5F:6A:E6:64:4E:78:10:74:F5:FF:8A:55:0E:80
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVE36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVE36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.tjgo.jus.br, DNS:tjgo.jus.br
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Oct 12 19:35:59.688 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:84:FB:70:6D:53:8D:66:9F:BD:30:F7: F5:F5:54:AC:68:83:18:31:AE:C5:EE:04:2D:97:79:9C: 71:A6:8A:1A:6E:02:20:19:DD:58:CF:3E:52:16:DB:C6: 54:FC:25:AC:95:7E:67:E1:88:E0:39:CE:1B:A6:70:0C: 47:31:AC:A3:83:59:51 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Oct 12 19:35:59.702 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0B:0A:3C:04:8F:01:69:BC:FA:6F:41:03: 43:2D:AB:3B:0C:6D:CC:0D:AF:CD:02:92:78:F2:D3:7A: AC:7A:57:14:02:20:56:2F:46:13:49:72:52:87:60:4E: C0:A0:67:02:6C:BA:15:36:53:1D:00:55:61:6C:46:15: C5:8A:F9:45:28:6D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Oct 12 19:35:59.753 2026 GMT Extensions: 00:00:05:00:0B:E7:57:30 Signature : ecdsa-with-SHA256 30:45:02:20:22:C6:41:5D:43:A8:9B:F6:92:BC:C8:77: 4C:6E:EF:98:B9:4C:22:44:00:41:0F:DB:92:21:01:7B: 22:21:5B:27:02:21:00:E3:53:94:5E:A4:E8:8E:8F:F1: 35:88:48:F4:A3:CA:6F:41:2B:40:47:7E:21:35:AF:AE: BB:E6:90:66:68:BB:98
-----BEGIN CERTIFICATE-----
MIIFQDCCBOegAwIBAgIRAKVyTi/RR4lY25fGDChaDHYwCgYIKoZIzj0EAwIwYDEL
MAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UEAxMu
U2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIENBIE9WIEUzNjAe
Fw0yNjEwMTIwMDAwMDBaFw0yNzA0MjEyMzU5NTlaMGkxCzAJBgNVBAYTAkJSMQ8w
DQYDVQQIDAZHb2nDoXMxMTAvBgNVBAoMKFRyaWJ1bmFsIGRlIEp1c3Rpw6dhIGRv
IEVzdGFkbyBkZSBHb2nDoXMxFjAUBgNVBAMMDSoudGpnby5qdXMuYnIwdjAQBgcq
hkjOPQIBBgUrgQQAIgNiAARkWY1D5ZBhUWcczheXnEdiMmsSDSV3vKQ3q0GQFRaT
ZM6CvNiM42J8cUz+EvEZ55fgcIqz/Jz1OLHt6IW+ZII/83/9K/L90nJJQp80lg+R
Swnyf1cf+2EPw8Zf1peuVBOjggNaMIIDVjAfBgNVHSMEGDAWgBRMOHolNGv9+Y8a
YByScapn+YI36zAdBgNVHQ4EFgQULLhdU4wxX2rmZE54EHT1/4pVDoAwDgYDVR0P
AQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEW
F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBUBgNVHR8ETTBLMEmg
R6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNTZXJ2ZXJB
dXRoZW50aWNhdGlvbkNBT1ZFMzYuY3JsMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYB
BQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY1NlcnZl
ckF1dGhlbnRpY2F0aW9uQ0FPVkUzNi5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9v
Y3NwLnNlY3RpZ28uY29tMCUGA1UdEQQeMByCDSoudGpnby5qdXMuYnKCC3RqZ28u
anVzLmJyMIIBhQYKKwYBBAHWeQIEAgSCAXUEggFxAW8AdgBGojlnxg22RofGbz35
mZR2k6amESCEV9VV5+PQodm2RgAAAaExnV/IAAAEAwBHMEUCIQCE+3BtU41mn70w
9/X1VKxogxgxrsXuBC2XeZxxpooabgIgGd1Yzz5SFtvGVPwlrJV+Z+GI4DnOG6Zw
DEcxrKODWVEAdQDW1Y2p0BdT82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAAAaEx
nV/WAAAEAwBGMEQCIAsKPASPAWm8+m9BA0MtqzsMbcwNr80Cknjy03qselcUAiBW
L0YTSXJSh2BOwKBnAmy6FTZTHQBVYWxGFcWK+UUobQB+AFlubDOGlLJZcqJWyKDo
3ZBKdugIPdqHOwEIOCgUPO5ZAAABoTGdYAkACAAABQAL51cwBAMARzBFAiAixkFd
Q6ib9pK8yHdMbu+YuUwiRABBD9uSIQF7IiFbJwIhAONTlF6k6I6P8TWISPSjym9B
K0BHfiE1r6675pBmaLuYMAoGCCqGSM49BAMCA0cAMEQCIBM/l30znMyhZPBY7cfT
iFG+NpFWxBOqtmhcr1aOnCbqAiB0PSo50LZfNm8JoWR18Ij+mvCMAxSvYQ6ONfuO
fWobyg==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-05T15:55:32+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV E36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3424
Serial (hex)
12B0648BE8E2B91074216C1DAE9C5795
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

41:02:BB:08:B7:EA:19:E5:67:EB:67:10:38:4C:54:0A:FD:AD:99:3A:F0:D9:DF:BF:91:CA:62:73:75:5B:8B:A0
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
4C:38:7A:25:34:6B:FD:F9:8F:1A:60:1C:92:71:AA:67:F9:82:37:EB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4092
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
787
Serial (hex)
56671D04EA4F994C6F10814759D27594
Signature
RSA-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A6:CF:64:DB:B4:C8:D5:FD:19:CE:48:89:60:68:DB:03:B5:33:A8:D1:33:6C:62:56:A8:7D:00:CB:B3:DE:F3:EA
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →