DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

usdoj.gov · 172.65.90.24:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=usdoj.gov
Issuer
C=US O=SSL Corporation CN=Cloudflare TLS Issuing ECC CA 3
Valid from
2026-09-26T21:16:31+00:00
Expires
2026-12-25T21:23:56+00:00
Days remaining
83
Serial (hex)
0BC525D3A2B4117F56E59E762D38801D
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:usdoj.gov, DNS:*.usdoj.gov, DNS:*.admp.usdoj.gov, DNS:*.admp-t.usdoj.gov, DNS:*.beta.usdoj.gov, DNS:*.cops.usdoj.gov, DNS:*.crt.usdoj.gov, DNS:*.ecssts.usdoj.gov, DNS:*.elms.usdoj.gov, DNS:*.enrd.usdoj.gov, DNS:*.federal.usdoj.gov, DNS:*.nflis.deadiversion.usdoj.gov, DNS:*.notify.usdoj.gov, DNS:*.ojp.usdoj.gov, DNS:*.p-foiaxpspal-vm.oig.usdoj.gov, DNS:*.synthopioids.nflis.deadiversion.usdoj.gov, DNS:*.tax.usdoj.gov, DNS:*.ustp.usdoj.gov

SHA-256 fingerprint

7F:01:C7:99:CA:3D:2E:02:FC:01:6A:B7:99:AF:16:E9:FE:19:C1:C3:C1:5D:9F:EA:27:76:69:84:D9:A6:1E:72
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66
authorityInfoAccess
CA Issuers - URI:http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer OCSP - URI:http://o.cf-i.ssl.com
subjectAltName
DNS:usdoj.gov, DNS:*.usdoj.gov, DNS:*.admp.usdoj.gov, DNS:*.admp-t.usdoj.gov, DNS:*.beta.usdoj.gov, DNS:*.cops.usdoj.gov, DNS:*.crt.usdoj.gov, DNS:*.ecssts.usdoj.gov, DNS:*.elms.usdoj.gov, DNS:*.enrd.usdoj.gov, DNS:*.federal.usdoj.gov, DNS:*.nflis.deadiversion.usdoj.gov, DNS:*.notify.usdoj.gov, DNS:*.ojp.usdoj.gov, DNS:*.p-foiaxpspal-vm.oig.usdoj.gov, DNS:*.synthopioids.nflis.deadiversion.usdoj.gov, DNS:*.tax.usdoj.gov, DNS:*.ustp.usdoj.gov
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.38064.1.3.1.1
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://c.cf-i.ssl.com/ae801ed1c55bb579d79208b0d772acfb8cc3a208.crl
keyUsage
Digital Signature
1.3.6.1.4.1.44363.44

ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 26 21:26:33.077 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6D:86:F2:CF:5F:52:FC:49:C2:80:15:4D: F1:37:E6:F0:65:94:85:AE:6A:0B:83:4A:65:96:80:B8: 97:76:C1:24:02:21:00:A3:9C:6A:08:48:13:D9:F1:10: 90:89:03:74:CE:4D:68:29:D7:2C:92:DD:15:D0:0E:5E: 03:59:B3:DC:FB:8F:2F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Sep 26 21:26:33.103 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:64:28:1A:F2:CF:E1:A1:21:DB:19:13:18: 8B:F5:57:DA:99:9C:FC:20:B9:D1:69:7C:51:11:1E:72: 87:B9:13:9E:02:21:00:C3:32:DE:B0:16:2C:C8:CC:B8: AD:D6:59:23:5D:A1:CC:10:23:40:A1:F8:39:66:E1:E7: 3C:7D:19:A2:C4:7C:DA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-03T18:04:00+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=US O=SSL Corporation CN=Cloudflare TLS Issuing ECC CA 3
Issuer
C=US O=SSL Corporation CN=SSL.com TLS Transit ECC CA R2
Valid from
2025-05-29T19:49:45+00:00
Expires
2035-05-27T19:49:44+00:00
Days remaining
3158
Serial (hex)
31EEE88AFB87CD9EF8336604743F9B27
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

F1:5F:29:AB:EF:73:AA:4D:D9:AB:75:4B:AE:AE:36:85:BD:D3:87:4B:46:B5:25:07:11:77:62:86:85:71:80:26
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-T-ECC-R2.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSL.com-TLS-T-ECC-R2.crl
subjectKeyIdentifier
83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=SSL Corporation CN=SSL.com TLS Transit ECC CA R2
Issuer
C=US O=SSL Corporation CN=SSL.com TLS ECC Root CA 2022
Valid from
2022-10-21T17:02:23+00:00
Expires
2037-10-17T17:02:22+00:00
Days remaining
4031
Serial (hex)
604D8AF8D00BA8748B955853172C5F2E
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

5D:1B:C3:99:27:4E:64:9E:1C:72:69:7D:E9:1A:54:AD:72:50:88:C5:22:1C:B6:1E:17:EE:9C:29:0B:C4:2A:92
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:1
authorityKeyIdentifier
89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0
authorityInfoAccess
CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.ssl.com/repository
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-ECC.crl
subjectKeyIdentifier
32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US O=SSL Corporation CN=SSL.com TLS ECC Root CA 2022
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2025-08-01T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
820
Serial (hex)
173DCA60EA9F8E1026DAFCD72810E48E
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BA:06:D3:D3:E3:48:FC:E7:47:8C:C8:4B:42:2D:0E:63:8E:9E:22:1E:F1:A0:B5:3A:DC:14:CC:70:E0:4B:8A:B8
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:2
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3 Policy: 1.3.6.1.4.1.38064.1.3.1.1 Policy: 1.3.6.1.4.1.38064.1.3.1.2 Policy: 1.3.6.1.4.1.38064.1.3.1.3 Policy: 1.3.6.1.4.1.38064.1.3.1.4 Policy: 1.3.6.1.4.1.38064.1.3.1.5 Policy: 1.3.6.1.4.1.38064.1.3.1.6
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →