THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

zdns.cn · 202.173.11.195:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=北京市 O=互联网域名系统北京市工程研究中心有限公司 CN=*.zdns.cn
Issuer
C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
Valid from
2026-04-16T00:00:00+00:00
Expires
2026-10-31T23:59:59+00:00
Days remaining
36
Serial (hex)
06EDF19308184FEAAB90E1A3C2A2BFC5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.zdns.cn, DNS:zdns.cn

SHA-256 fingerprint

7B:A9:32:F0:07:0C:60:7B:68:F8:5D:9F:CD:86:11:03:49:06:50:00:87:9D:0D:EF:5C:27:57:A2:F1:9E:AF:32
Certificate extensions & PEM
authorityKeyIdentifier
41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
subjectKeyIdentifier
B0:92:FF:12:60:4B:AA:F3:F9:16:1A:63:17:50:C4:92:AF:96:66:A6
subjectAltName
DNS:*.zdns.cn, DNS:zdns.cn
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Apr 16 02:15:06.459 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DB:4C:A0:A5:33:28:D8:E7:36:D3:04: C3:72:DE:BD:D7:3D:32:68:56:20:38:C3:FE:49:8F:AF: BC:D3:2F:6F:AE:02:20:04:08:B5:37:C1:E1:40:6F:74: A9:CB:E9:2F:F6:D6:EE:44:73:90:25:DB:A8:64:BE:CC: AA:11:CF:93:4D:FC:2C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Apr 16 02:15:06.613 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:29:0F:6B:5C:64:CB:C5:E0:06:FE:DD:06: E5:33:9F:EF:0C:B3:84:20:23:E4:15:B5:E8:E8:20:4B: 01:18:DA:32:02:21:00:D4:18:1C:D6:95:43:4D:F0:47: 45:2C:1F:B2:31:ED:0E:B9:6E:A3:CA:59:58:0C:B6:B0: B0:4F:0B:66:68:23:56 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Apr 16 02:15:06.469 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E1:26:1C:CC:6D:E6:1D:70:5D:94:99: 8D:B5:E0:AE:6C:91:96:13:5B:47:C7:86:CC:DC:5D:75: 91:83:B8:D4:27:02:21:00:AE:1F:C4:18:B5:D6:0C:54: DD:E4:EA:19:59:3D:A8:98:7E:DE:6D:06:F3:AA:7A:9C: 71:D5:8E:9B:24:9E:3A:9B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-25T21:38:11+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-12-15T00:00:00+00:00
Expires
2032-12-14T23:59:59+00:00
Days remaining
2272
Serial (hex)
0F06BB09306148267FCA1B71C1DB807D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:DC:9E:DC:0F:DD:FA:97:5A:14:32:EF:80:6E:C7:80:07:8B:53:62:AD:45:AF:76:DB:15:C9:07:63:0D:B2:5D
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →