DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

xtom.sg · 92.118.188.8:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=xtom.sg
Issuer
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Valid from
2026-07-21T00:00:00+00:00
Expires
2026-10-19T23:59:59+00:00
Days remaining
23
Serial (hex)
D7B9323C655E3D1818647E83E6CFC1BE
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:xtom.sg, DNS:*.xtom.sg

SHA-256 fingerprint

87:C3:4F:A7:95:F5:58:BE:E0:FB:36:E4:14:F8:7E:5C:87:B1:F4:FA:09:10:9B:AB:C7:2B:F3:B4:20:D1:35:52
Certificate extensions & PEM
authorityKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
subjectKeyIdentifier
12:8A:BE:F0:98:4B:EF:0D:48:B4:BF:F6:AF:9B:2F:9C:23:13:33:51
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/ZeroSSLECCDVSSLCA2.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jul 21 19:59:56.546 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:87:7B:56:4B:AB:C2:99:DD:B1:38:8C: B0:5C:8D:E1:AA:B6:B6:74:94:6B:F5:77:63:AF:9A:5B: 4E:AF:1E:63:0D:02:20:6D:A4:6F:B5:5D:E6:4B:54:B8: AD:FB:BB:B6:D0:2A:BD:EC:60:6C:1B:49:74:23:E9:35: 58:FB:A3:0D:22:94:6D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Jul 21 19:59:56.540 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6A:DB:DC:B9:CE:66:FC:D7:6C:DC:F2:F8: 62:6C:9A:23:4E:E4:DA:DF:E0:6B:1E:A9:52:67:27:97: E2:BF:EB:9F:02:21:00:88:1D:0C:4A:95:A0:16:AE:05: 40:F6:2F:02:95:BB:0B:25:6D:B0:F7:CA:AD:B3:C4:F1: 9D:C0:30:63:D7:AD:0B
subjectAltName
DNS:xtom.sg, DNS:*.xtom.sg
-----BEGIN CERTIFICATE-----
MIIDfDCCAyKgAwIBAgIRANe5MjxlXj0YGGR+g+bPwb4wCgYIKoZIzj0EAwIwRjEL
MAkGA1UEBhMCQVQxFTATBgNVBAoTDFplcm9TU0wgR21iSDEgMB4GA1UEAxMXWmVy
b1NTTCBFQ0MgRFYgU1NMIENBIDIwHhcNMjYwNzIxMDAwMDAwWhcNMjYxMDE5MjM1
OTU5WjASMRAwDgYDVQQDEwd4dG9tLnNnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcD
QgAEQQXA+dUBWcEqRm0qjKSCeyry4bdY6CWokxPk7VpP8oPLDNInp7TLPJ3m+Ekn
oDHCCdELbj9IcrlnYzr955G2+qOCAiMwggIfMB8GA1UdIwQYMBaAFJRFn9pRR3HV
c66sHasIchJtrXxiMB0GA1UdDgQWBBQSir7wmEvvDUi0v/avmy+cIxMzUTAOBgNV
HQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDATAT
BgNVHSAEDDAKMAgGBmeBDAECATBuBggrBgEFBQcBAQRiMGAwOQYIKwYBBQUHMAKG
LWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vWmVyb1NTTEVDQ0RWU1NMQ0EyLmNydDAj
BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAA
AZ+GQ3iCAAAEAwBHMEUCIQCHe1ZLq8KZ3bE4jLBcjeGqtrZ0lGv1d2OvmltOrx5j
DQIgbaRvtV3mS1S4rfu7ttAqvexgbBtJdCPpNVj7ow0ilG0AdgDIo8R/x7OtuTVr
AT9qehJt4zpOQ6XGRvmXrTl1mR3PmgAAAZ+GQ3h8AAAEAwBHMEUCIGrb3LnOZvzX
bNzy+GJsmiNO5Nrf4GseqVJnJ5fiv+ufAiEAiB0MSpWgFq4FQPYvApW7CyVtsPfK
rbPE8Z3AMGPXrQswHQYDVR0RBBYwFIIHeHRvbS5zZ4IJKi54dG9tLnNnMAoGCCqG
SM49BAMCA0gAMEUCIDyNWYNf73B9foheHZ8l4XabB+lCwZMeM03egpn2oLZnAiEA
z/sJn7ujTiEfXXdzl8MtpyHieIaphwvlWQfwe2xZojU=
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-26T16:35:42+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=AT O=ZeroSSL GmbH CN=ZeroSSL ECC DV SSL CA 2
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2025-09-24T00:00:00+00:00
Expires
2035-09-23T23:59:59+00:00
Days remaining
3284
Serial (hex)
C4E1C5BB00F0278F347BE4F85D63FCCA
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

BE:C8:4F:CE:0D:AA:42:3F:3B:3E:ED:38:EA:48:06:6C:C5:61:8F:52:44:AD:65:CD:9F:86:24:A8:13:FA:4C:3D
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
94:45:9F:DA:51:47:71:D5:73:AE:AC:1D:AB:08:72:12:6D:AD:7C:62
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4132
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIDRjCCAsugAwIBAgIQGp6v7G3o4ZtcGTFBto2Q3TAKBggqhkjOPQQDAzCBiDEL
MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl
eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT
JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMjEwMzIy
MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjBfMQswCQYDVQQGEwJHQjEYMBYGA1UEChMP
U2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIg
QXV0aGVudGljYXRpb24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAR2
+pmpbiDt+dd34wc7qNs9Xzjoq1WmVk/WSOrsfy2qw7LFeeyZYX8QeccCWvkEN/U0
NSt3zn8gj1KjAIns1aeibVvjS5KToID1AZTc8GgHHs3u/iVStSBDHBv+6xnOQ6Oj
ggEgMIIBHDAfBgNVHSMEGDAWgBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAdBgNVHQ4E
FgQU0SLaTFnxS18mOKqd1u7rDcP7qWEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB
/wQFMAMBAf8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEGA1UdIAQK
MAgwBgYEVR0gADBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVz
dC5jb20vVVNFUlRydXN0RUNDQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwNQYI
KwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu
Y29tMAoGCCqGSM49BAMDA2kAMGYCMQCMCyBit99vX2ba6xEkDe+YO7vC0twjbkv9
PKpqGGuZ61JZryjFsp+DFpEclCVy4noCMQCwvZDXD/m2Ko1HA5Bkmz7YQOFAiNDD
49IWa2wdT7R3DtODaSXH/BiXv8fwB9su4tU=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →