DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

visual.cz · 81.2.195.116:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.visual.cz
Issuer
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validation Server CA G3
Valid from
2025-11-20T23:03:38+00:00
Expires
2026-12-12T13:33:38+00:00
Days remaining
75
Serial (hex)
1CE93BC07313F1690E2148CADB2C7074
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.visual.cz, DNS:visual.cz

SHA-256 fingerprint

D6:E2:45:08:75:6C:08:1A:B2:0F:AA:8B:13:C4:2A:FC:04:94:E9:F6:BA:92:A0:04:DC:9A:8C:45:59:D7:B8:E4
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
42:83:6D:80:7C:09:84:67:FD:80:57:AB:F1:26:F5:77:C8:22:82:71
authorityInfoAccess
CA Issuers - URI:http://cacert.actalis.it/certs/actalis-autdvg3 OCSP - URI:http://ocsp06.actalis.it/VA/AUTHDV-G3
subjectAltName
DNS:*.visual.cz, DNS:visual.cz
certificatePolicies
Policy: 1.3.159.1.23.1 CPS: https://www.actalis.it/area-download Policy: 2.23.140.1.2.1
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL
subjectKeyIdentifier
8F:BE:44:2C:4A:E0:68:01:84:F6:E4:E5:45:11:D3:AD:F7:C9:E3:6A
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 20 23:13:38.984 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A5:00:54:6C:AB:A6:15:B0:AC:59:EF: 65:FE:3C:DD:25:B2:E9:7A:83:D8:8D:98:C9:39:47:87: B0:23:94:0A:88:02:21:00:8E:36:7D:A7:9D:65:99:9C: DA:B5:C3:96:C3:AD:5A:87:D4:9E:B8:28:F1:14:8E:57: 00:17:BC:0C:1B:C8:93:56 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 20 23:13:39.028 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:61:FA:B8:C1:86:D7:7F:C0:36:F8:F2:B3: 05:1E:19:DF:B6:59:80:0E:E1:D4:48:92:3B:67:E4:D7: B4:F0:C6:AC:02:21:00:A5:2B:16:69:30:BB:A6:E2:A7: 75:ED:22:51:20:36:57:15:C4:8A:95:ED:74:A5:E1:D3: 1E:FB:1B:39:5D:FC:49 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 20 23:13:39.029 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6A:8C:66:A9:64:39:12:41:B5:9B:7D:AA: 0F:3B:44:5F:F5:F2:56:47:8E:66:44:C8:E0:72:6B:00: AF:52:5E:41:02:21:00:88:45:35:A0:77:46:B0:35:2C: 09:04:BC:3A:BA:B6:A0:61:C1:53:1C:4D:D9:92:62:BC: 4E:CC:12:2D:06:8D:31
-----BEGIN CERTIFICATE-----
MIIHajCCBVKgAwIBAgIQHOk7wHMT8WkOIUjK2yxwdDANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNTExMjAy
MzAzMzhaFw0yNjEyMTIxMzMzMzhaMBYxFDASBgNVBAMMCyoudmlzdWFsLmN6MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAdj0Ey+qW4av04xmrr9TmLV
P15i+lljVHP9512ILXAgYIaHEEbsGvIDFWBQN5xpNkwR9v3R/ZshB7Du+xgCoBOT
fitGaDWBnSRQ+wOJ0YTnokU6CQ0dhuvl2U+j/BXS7zefo4qKBBqDlkgd5jdIYVLL
/q9B57E/sU7+c6tqswnmX4iAfGDPt1A1MSqN77qzeFdgpUOQ6GiMKUX94a6IUze1
KrL7SHUTU27eFRw38855TiL2Y0lFdVlMkQU3pWRewwEa+8jUD61NrEpVOETvR5gs
KHKCepMPYHOvp1i3bDM+/T1BMF9xD+bZFsnsZ94DqsEXNaSjHF5P3T4i+mBvgQID
AQABo4IDQzCCAz8wDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBRCg22AfAmEZ/2A
V6vxJvV3yCKCcTB9BggrBgEFBQcBAQRxMG8wOgYIKwYBBQUHMAKGLmh0dHA6Ly9j
YWNlcnQuYWN0YWxpcy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGR2ZzMwMQYIKwYBBQUH
MAGGJWh0dHA6Ly9vY3NwMDYuYWN0YWxpcy5pdC9WQS9BVVRIRFYtRzMwIQYDVR0R
BBowGIILKi52aXN1YWwuY3qCCXZpc3VhbC5jejBRBgNVHSAESjBIMDwGBiuBHwEX
ATAyMDAGCCsGAQUFBwIBFiRodHRwczovL3d3dy5hY3RhbGlzLml0L2FyZWEtZG93
bmxvYWQwCAYGZ4EMAQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBI
BgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsMDYuYWN0YWxpcy5pdC9SZXBvc2l0
b3J5L0FVVEhEVi1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBSPvkQsSuBoAYT25OVF
EdOt98njajAOBgNVHQ8BAf8EBAMCBaAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsB
aQB3ANgJVTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7RUsUAAABmqOLfKgAAAQD
AEgwRgIhAKUAVGyrphWwrFnvZf483SWy6XqD2I2YyTlHh7AjlAqIAiEAjjZ9p51l
mZzatcOWw61ah9SeuCjxFI5XABe8DBvIk1YAdgCUTkOH+uzB74HzGSQmqBhlAcfT
XzgCAT9yZ31VNy4Z2AAAAZqji3zUAAAEAwBHMEUCIGH6uMGG13/ANvjyswUeGd+2
WYAO4dRIkjtn5Ne08MasAiEApSsWaTC7puKnde0iUSA2VxXEipXtdKXh0x77Gzld
/EkAdgCvZ4g7V7BO3Y+m2X72LqjrgQrHcWDwJF5V1gwv54WHOgAAAZqji3zVAAAE
AwBHMEUCIGqMZqlkORJBtZt9qg87RF/18lZHjmZEyOByawCvUl5BAiEAiEU1oHdG
sDUsCQS8Orq2oGHBUxxN2ZJivE7MEi0GjTEwDQYJKoZIhvcNAQELBQADggIBAKO2
dlAcc4Eqy6gft7fB7LCGvcbCzYdKBSdeXhK/zN6lWRnWk5X/Z0fU4YLKMU0AhNDQ
NuPw+Us1oN7CGleMQzeOg65OkJXY1LQGwx2DWBzoKbYDPwyFuKWKCSmgk+P+3RdX
lQgn+afVp52EiTimHzDZGQXtYAZdo6SqMdejqGS0u9Y7W6mpUvZopB2lCFAaba3U
LWz545E7cQONSxllciaWjgGk3xeniSq4H5hUMd80fblY6++DlBWF2WbT9l5cnDai
60MEz+HjDT5+/kCyBv95htYwiapEg2YGdy/943ZpYGHqaU82tdxdDg6O0XA5aDon
fEMaLx5vmufoxbJ7Ln0qSgcN1rbBxh3RQJWzSblZK4EKHFVN0B+zFhVRuPyqcDJr
24DrFCfWPCmZoUzzxJ1HViJ5rnVtbvgxAyRC7qzDYMF/h4OoGrkFvo+dWNeRkOAI
m1TpKR7vu+jU6Mjlaw7050vLZEJs6lv3WzEWnQI19QrurJVaahYudV3zxY/A4s/d
oIxWyCntDif5TRpymCKP1gIyOXB0m6LIsSLj0HlHzqIy3hHV8F2fu69D9TZ43BFE
HECLKZGAaygnWIcphAzVUiBWf+jdMpS70BYXsNjPMDHbdDD/6Qcf/T437x1v4XSw
aTLLNUcQpV5ccUYqK43GUmsS3fcEXexQRBVWL7qg
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-09-28T02:02:05+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=IT ST=Bergamo L=Ponte San Pietro O=Actalis S.p.A. CN=Actalis Domain Validation Server CA G3
Issuer
C=IT L=Milan O=Actalis S.p.A./03358520967 CN=Actalis Authentication Root CA
Valid from
2020-07-06T06:36:50+00:00
Expires
2030-09-22T11:22:02+00:00
Days remaining
1455
Serial (hex)
12737797A315886DFEB76C7E6A5A0354
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

34:50:B6:D3:82:90:C3:CA:5D:7B:B3:8B:71:49:5B:BF:72:C6:D0:C4:4D:BA:29:22:45:F9:BC:A9:84:3A:9F:FF
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
authorityInfoAccess
OCSP - URI:http://ocsp05.actalis.it/VA/AUTH-ROOT
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.actalis.it/area-download
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary Full Name: URI:http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL
subjectKeyIdentifier
42:83:6D:80:7C:09:84:67:FD:80:57:AB:F1:26:F5:77:C8:22:82:71
keyUsage
Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →