DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

tustao.com.br · 191.252.4.55:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`*.websiteseguro.com' did not match expected CN=`tustao.com.br'
The certificate expires within 30 days.

Certificate verification failed

Subject
CN=*.websiteseguro.com
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Valid from
2026-03-29T17:19:47+00:00
Expires
2026-10-14T17:19:47+00:00
Days remaining
22
Serial (hex)
6E53A2A8C6B615CDE7EA43CF
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.websiteseguro.com, DNS:websiteseguro.com

SHA-256 fingerprint

CA:2D:9A:B4:B7:23:05:78:5C:79:C1:CB:26:75:20:67:A7:EF:C6:BC:AB:54:25:DB:A4:C5:52:4B:7B:49:51:3E
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr6alphasslca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr6alphasslca2025
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr6alphasslca2025.crl
subjectAltName
DNS:*.websiteseguro.com, DNS:websiteseguro.com
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
subjectKeyIdentifier
98:C7:73:8D:9D:EC:2F:A9:9E:51:4A:E9:C6:4D:3A:77:5D:0A:96:AD
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Mar 29 17:19:49.988 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2F:8A:29:F7:77:77:7F:70:9E:8E:C5:F8: 63:0F:0D:A5:92:5B:08:B8:FC:6C:B1:72:8F:0C:45:1C: D5:56:8E:4C:02:21:00:F3:E1:D0:4D:A5:A2:15:E0:93: B7:C2:3D:66:0D:A1:03:96:9C:A1:65:DA:C5:1D:20:94: 08:7F:05:B1:3C:4A:52 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Mar 29 17:19:50.328 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:70:54:37:42:5B:C3:09:C7:45:02:23:93: 8C:62:15:60:9D:99:ED:3A:0D:93:FB:C6:2B:5C:25:25: 96:78:4C:B4:02:21:00:BF:04:59:73:08:CB:CC:42:0C: 9F:0D:C2:4A:52:1F:83:CC:CA:F5:95:D3:C5:39:A7:D6: B4:25:C9:38:EE:23:CF Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Mar 29 17:19:50.361 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F0:6D:AE:D4:16:A4:5A:BA:90:01:2E: 67:8D:A1:81:14:00:C2:C2:9A:29:56:78:0C:3C:4C:BC: 1E:16:66:A8:97:02:20:2C:2A:1A:60:CF:3F:8D:3E:2B: 5B:DC:70:51:BF:E5:C4:24:51:4C:0F:36:9C:59:47:72: ED:04:6A:D5:2E:69:95
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIMblOiqMa2Fc3n6kPPMA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDI1MB4XDTI2MDMyOTE3MTk0
N1oXDTI2MTAxNDE3MTk0N1owHjEcMBoGA1UEAwwTKi53ZWJzaXRlc2VndXJvLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANkB/wOTfz3bwFmnmedi
GCMwpO9Ic4TkYOeN++SiJlxJB8/n8V6fps9RmNjWZcaZfPXcwIIZzJX1CZgWr5HN
rncLBv8HDBdUOp52cYzZjCHXlPsz/M3ftG9WWzGXzHEFq34eZ4/vJ7v7ZkBiEh7p
dUAO78ZThRQnYXwQwdTdFcWv7e+EE1RcHpEMgtEyRiFVlM6iu594MyOC9+USq2r5
FYrKhS2zSyMea3K4AsDPZi/SNXXNHIjAW0pemILvF8dS7GqG3ewEbT3npT6sTAVS
IL1c0ElIKc0xKcbwzxYGRtrQAZvIW5gxJ6+DfrClIGu6imShzvAg2UwZKtGPE9Gr
aaECAwEAAaOCA3EwggNtMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGZ
BggrBgEFBQcBAQSBjDCBiTBJBggrBgEFBQcwAoY9aHR0cDovL3NlY3VyZS5nbG9i
YWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyNmFscGhhc3NsY2EyMDI1LmNydDA8Bggr
BgEFBQcwAYYwaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyNmFscGhh
c3NsY2EyMDI1MFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAy
BggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9y
eS8wRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9n
c2djY3I2YWxwaGFzc2xjYTIwMjUuY3JsMDEGA1UdEQQqMCiCEyoud2Vic2l0ZXNl
Z3Vyby5jb22CEXdlYnNpdGVzZWd1cm8uY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAfBgNVHSMEGDAWgBTFtJOPbyvcHki/txAwhc7RsrtILTAdBgNV
HQ4EFgQUmMdzjZ3sL6meUUrpxk06d10Klq0wggF+BgorBgEEAdZ5AgQCBIIBbgSC
AWoBaAB2AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWwyxTDFFjnAAABnTqb6uQA
AAQDAEcwRQIgL4op93d3f3CejsX4Yw8NpZJbCLj8bLFyjwxFHNVWjkwCIQDz4dBN
paIV4JO3wj1mDaEDlpyhZdrFHSCUCH8FsTxKUgB2ANgJVTuUT3r/yBYZb5RPhauw
+Pxeh1UmDxXRLnK7RUsUAAABnTqb7DgAAAQDAEcwRQIgcFQ3QlvDCcdFAiOTjGIV
YJ2Z7ToNk/vGK1wlJZZ4TLQCIQC/BFlzCMvMQgyfDcJKUh+DzMr1ldPFOafWtCXJ
OO4jzwB2AMIxfldFGaNF7n843rKQQevHwiFaIr9/1bWtdprZDlLNAAABnTqb7FkA
AAQDAEcwRQIhAPBtrtQWpFq6kAEuZ42hgRQAwsKaKVZ4DDxMvB4WZqiXAiAsKhpg
zz+NPitb3HBRv+XEJFFMDzacWUdy7QRq1S5plTANBgkqhkiG9w0BAQsFAAOCAQEA
eWPLIyfookjqTVNRTyDm5GbPCmKSUSrKYnsQQ7PUDbJu12UJdp0bEdfC9cVP+xyT
tM6Bewhagf77iHeHoNRRKIhR7/9c5SVBZVt33ljMD02GvvmYttIRtn5kGGAxJmBB
RdrQmXMqWk9vMp6Elb9qmHoucGYjDf8UtvO0O5+/ytb0Svy6pi9N3HEQ1Dru8Kix
8Ob/S6tH4lDOkqLYasplgH0//CZDZ8W16CiwFJOgXSzlq9Rga6Zo+B/7ERiHglng
yha5YRTQ07Twh3bqVl2M7U5N2qL/8SyOpOJCmv9bEr0Z5cleicWt66EXuj6p1vo5
JzZ+q6pdC/Tgx7fx9v80VQ==
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T05:40:58+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R6 AlphaSSL CA 2025
Issuer
OU=GlobalSign Root CA - R6 O=GlobalSign CN=GlobalSign
Valid from
2025-05-21T02:36:52+00:00
Expires
2027-05-21T00:00:00+00:00
Days remaining
240
Serial (hex)
837D4EB89E912FE72CAD3BC7692DDC20
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A8:83:55:92:31:F8:38:8D:AF:35:CE:41:C8:10:10:40:AE:8F:D9:B6:56:43:42:47:B9:47:5A:F5:92:CC:08:CA
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C5:B4:93:8F:6F:2B:DC:1E:48:BF:B7:10:30:85:CE:D1:B2:BB:48:2D
authorityKeyIdentifier
AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr6 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r6.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r6.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →