DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

usg.com · 64.43.232.136:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=Illinois O=USG Corporation CN=usg.com
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2025-12-05T00:00:00+00:00
Expires
2026-12-05T23:59:59+00:00
Days remaining
69
Serial (hex)
103C6B070E7EADC545BE2999F4AECBCD
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:usg.com, DNS:www.usg.com

SHA-256 fingerprint

F1:E2:D8:A1:F4:CF:7F:2D:6B:6C:4D:FE:84:FD:82:51:4C:53:84:52:98:6F:53:AC:B9:B3:30:BE:FF:CC:B2:41
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
F3:E3:79:C7:09:1B:CC:CD:AA:08:43:59:27:69:53:2F:B6:81:FD:1F
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Dec 5 20:20:23.683 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6C:81:6F:AB:9F:F7:51:EB:09:40:D8:5C: 02:AD:29:11:83:32:95:EA:38:66:E2:8F:D1:A4:C6:D4: 29:28:F5:A6:02:20:6D:F0:80:E7:5C:66:74:2A:2F:8F: D3:4A:4F:FC:AC:E6:95:4B:F2:B9:39:88:24:0E:89:6E: 8F:0D:B0:F6:B2:64 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Dec 5 20:20:23.860 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C5:6E:F2:CF:64:63:54:49:7E:12:81: 51:67:3D:3F:49:83:0C:5E:27:03:48:4A:48:02:66:3E: 8E:8B:01:9A:6E:02:21:00:D1:3E:AC:3A:A9:91:CB:F7: 69:3F:2F:80:D1:47:EC:7B:2B:4D:37:F0:9E:55:A5:96: 16:43:55:3C:B4:71:3B:F1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Dec 5 20:20:23.659 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A7:9F:38:D6:83:D1:10:F2:3C:5B:DC: 14:69:4D:C6:91:73:B4:FA:FE:7A:9A:DB:AE:32:8C:1E: BF:F1:E4:77:38:02:21:00:D1:E9:9E:25:6D:36:60:4C: E9:6A:52:38:9D:E9:D1:33:D0:AB:17:E6:FD:48:BA:3F: 29:5A:0C:F0:8A:2F:E9:20
subjectAltName
DNS:usg.com, DNS:www.usg.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-SHA384 · Checked 2026-09-27T01:14:53+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3463
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →