DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

tzcert.go.tz · 196.32.240.43:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=TZ L=Dar Es Salaam O=Tanzania Communications Regulatory Authority CN=*.tzcert.go.tz
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2025-10-08T00:00:00+00:00
Expires
2026-11-08T23:59:59+00:00
Days remaining
37
Serial (hex)
0BBCB346AE2F084D185C0F1F5F8AF030
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.tzcert.go.tz, DNS:tzcert.go.tz, DNS:www.tzcert.go.tz

SHA-256 fingerprint

9A:C8:E2:A3:10:40:1F:5C:EA:B4:89:6A:0F:F7:30:92:95:F2:46:1F:12:C3:C1:77:AA:24:CB:95:E1:AB:4C:00
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
B4:7E:5B:8C:3E:5D:7A:7C:88:8E:63:89:4C:56:3B:96:F5:2B:3F:9D
subjectAltName
DNS:*.tzcert.go.tz, DNS:tzcert.go.tz, DNS:www.tzcert.go.tz
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Oct 8 05:36:21.267 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9A:3B:2D:FD:D2:93:4A:54:6C:EB:CA: 6E:AE:68:71:82:12:2E:FE:58:B6:F8:9F:39:F9:5B:3E: 02:D7:9E:BB:2B:02:20:38:69:7E:9F:B5:0D:52:B6:98: 51:64:34:27:90:5D:5D:B6:80:B9:43:AD:DC:77:B0:E0: 79:33:8F:DC:CA:BD:7A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 8 05:36:21.141 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:90:8D:28:33:7C:91:C4:F2:1A:D7:BC: 8A:E0:29:19:6C:70:7E:B5:87:1B:81:C4:68:48:EC:8B: E3:20:56:26:CE:02:21:00:DC:1F:EB:26:6D:C9:E5:82: 25:55:D2:F6:8F:84:65:B7:78:41:E9:F6:58:A6:38:77: 87:02:29:66:0D:D4:5C:0A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 8 05:36:21.163 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0B:46:78:FC:D6:2E:7B:89:D5:A0:59:0E: 9B:30:33:2D:A8:A0:E0:AD:D0:FA:E1:9C:CB:46:C0:17: F8:CD:DD:48:02:21:00:DD:61:9F:5C:9B:F2:79:2F:D9: 6C:D2:6E:F3:34:71:51:A0:AE:60:B4:87:5D:B9:8C:6D: E6:77:01:28:C4:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-02T20:27:28+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2021-03-30T00:00:00+00:00
Expires
2031-03-29T23:59:59+00:00
Days remaining
1639
Serial (hex)
0CF5BD062B5602F47AB8502C23CCF066
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →