DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

virginia.edu · 132.148.77.44:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `virginia.edu'

Certificate verification failed

Subject
C=US ST=Virginia O=University of Virginia CN=www.virginia.edu
Issuer
C=US O=Internet2 CN=InCommon RSA Server CA 2
Valid from
2025-12-12T00:00:00+00:00
Expires
2026-12-12T23:59:59+00:00
Days remaining
38
Serial (hex)
18CFE5B4CCB330467E75E551E41D48B2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.virginia.edu

SHA-256 fingerprint

ED:52:FB:D0:1A:3A:FB:C2:FC:C9:D3:81:CE:ED:D8:6A:75:BE:18:32:43:FE:B2:11:AF:FA:2D:EB:C5:9E:D6:8C
Certificate extensions & PEM
authorityKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
subjectKeyIdentifier
E8:C0:3F:C3:07:FE:ED:40:6F:7F:09:2F:6C:66:70:41:68:3D:DF:62
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonRSAServerCA2.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonRSAServerCA2.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Dec 12 16:01:19.764 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:57:11:A7:62:DC:A4:98:3D:CB:65:6D:54: 1B:B7:80:3F:2D:12:7B:A1:23:4E:E5:2A:59:97:2B:33: 64:0F:5C:DF:02:21:00:99:0F:C3:E5:08:36:CC:85:77: 00:1D:2A:1E:68:AF:C8:F6:DD:98:21:E6:48:3E:B5:8A: B9:6E:B5:0F:FD:30:73 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Dec 12 16:01:19.998 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F1:98:52:78:51:3B:40:D4:D6:B6:81: 23:29:E0:17:24:8F:40:88:8B:3A:C6:A8:B5:98:07:2E: CF:B9:B6:D0:BB:02:21:00:88:1A:D4:AA:37:64:AD:84: 14:48:87:59:C4:42:C1:03:B2:ED:57:5C:35:65:89:7C: BA:BE:5E:F6:A9:9B:A3:A5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : Dec 12 16:01:19.880 2025 GMT Extensions: 00:00:05:00:01:AD:AE:AA Signature : ecdsa-with-SHA256 30:44:02:20:57:C5:7D:FD:03:4F:5E:8F:FB:21:E8:4E: BD:EC:2A:86:74:BA:60:0E:46:74:36:72:20:E2:EC:7E: A3:7F:BA:17:02:20:0B:5B:EF:39:7C:EA:06:8B:3A:01: 5A:13:3B:D3:57:EB:CF:09:73:7E:EE:DD:31:A6:5E:3D: 7B:9B:18:3F:84:BD
subjectAltName
DNS:www.virginia.edu
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-04T12:00:07+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Internet2 CN=InCommon RSA Server CA 2
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2022-11-16T00:00:00+00:00
Expires
2032-11-15T23:59:59+00:00
Days remaining
2203
Serial (hex)
835B7615206D2D6E097E0B6E409FEFC0
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:E0:1C:C4:DD:0C:9D:92:A3:DB:D4:90:92:FF:13:F9:CD:38:74:45:CD:C5:7E:5B:98:4E:1B:77:21:B5:B0:29
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
788
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →