THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

top-ix.org · 194.116.72.20:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.top-ix.org
Issuer
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validation Server CA G3
Valid from
2025-11-11T13:23:01+00:00
Expires
2026-11-11T13:23:01+00:00
Days remaining
23
Serial (hex)
4D75B6422AF71F3D4696A3164C75BE57
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.top-ix.org, DNS:top-ix.org

SHA-256 fingerprint

B1:BB:08:87:24:1E:55:BB:7E:C9:69:43:BD:2D:BF:3D:C2:1F:27:0E:57:3B:6B:7D:E0:4C:27:A8:B6:A9:38:9B
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
42:83:6D:80:7C:09:84:67:FD:80:57:AB:F1:26:F5:77:C8:22:82:71
authorityInfoAccess
CA Issuers - URI:http://cacert.actalis.it/certs/actalis-autdvg3 OCSP - URI:http://ocsp06.actalis.it/VA/AUTHDV-G3
subjectAltName
DNS:*.top-ix.org, DNS:top-ix.org
certificatePolicies
Policy: 1.3.159.1.23.1 CPS: https://www.actalis.it/area-download Policy: 2.23.140.1.2.1
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL
subjectKeyIdentifier
51:20:0B:4E:21:36:75:E9:6F:F1:37:9A:36:15:0B:B5:30:8E:60:D1
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 11 13:33:02.294 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BC:8E:6E:77:1D:8F:23:F5:9E:96:5D: 3D:83:64:9B:DB:76:02:17:47:C2:F3:C6:51:94:A3:88: 57:73:89:61:9F:02:21:00:A2:00:A8:30:B1:AB:72:3E: 08:DB:95:89:A3:B9:BA:81:B8:23:3D:CF:FA:AF:7D:1F: 5E:71:D8:D5:71:E4:31:89 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 11 13:33:02.342 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DC:1D:D8:50:0C:3F:D8:34:62:98:1A: AD:BF:61:DF:A6:D6:C9:C4:E4:E6:A0:E5:0B:44:45:D4: 32:99:E8:0E:1E:02:21:00:C8:26:4A:DC:21:70:14:13: 62:55:28:84:C0:C2:69:93:02:F8:FC:A8:DB:F2:D4:BD: DE:10:06:58:CC:8F:F2:76 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 11 13:33:02.331 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:9C:B5:66:4E:26:32:49:8B:54:7B:1C: 97:79:DA:1F:57:6C:15:64:65:44:EE:03:3E:FA:BE:10: 54:C0:9A:03:CC:02:21:00:DB:F5:8F:C5:05:FF:1D:BE: FA:F5:6A:CA:EF:1C:8E:F0:BA:E6:7E:06:A0:0E:13:88: 59:64:7C:24:18:32:AE:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-18T20:45:05+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validation Server CA G3
Issuer
C=IT L=Milan O=Actalis S.p.A./03358520967 CN=Actalis Authentication Root CA
Valid from
2020-07-06T06:36:50+00:00
Expires
2030-09-22T11:22:02+00:00
Days remaining
1434
Serial (hex)
12737797A315886DFEB76C7E6A5A0354
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

34:50:B6:D3:82:90:C3:CA:5D:7B:B3:8B:71:49:5B:BF:72:C6:D0:C4:4D:BA:29:22:45:F9:BC:A9:84:3A:9F:FF
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
authorityInfoAccess
OCSP - URI:http://ocsp05.actalis.it/VA/AUTH-ROOT
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.actalis.it/area-download
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary Full Name: URI:http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL
subjectKeyIdentifier
42:83:6D:80:7C:09:84:67:FD:80:57:AB:F1:26:F5:77:C8:22:82:71
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →