DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

zdns.cn · 202.173.11.195:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=北京市 O=互联网域名系统北京市工程研究中心有限公司 CN=*.zdns.cn
Issuer
C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
Valid from
2026-10-08T00:00:00+00:00
Expires
2027-04-15T23:59:59+00:00
Days remaining
156
Serial (hex)
096113754BB0E3F0F5E7513A2982CBBF
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.zdns.cn, DNS:zdns.cn

SHA-256 fingerprint

3E:3D:40:7C:F7:8F:41:8A:14:89:8C:2E:EA:25:02:A6:D4:8C:71:D7:CA:37:8A:D8:2F:2B:EA:A7:01:32:4D:A9
Certificate extensions & PEM
authorityKeyIdentifier
41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
subjectKeyIdentifier
B0:92:FF:12:60:4B:AA:F3:F9:16:1A:63:17:50:C4:92:AF:96:66:A6
subjectAltName
DNS:*.zdns.cn, DNS:zdns.cn
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Oct 8 06:10:49.984 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F3:08:AF:53:B2:75:F5:77:4C:23:BC: 33:0A:C4:CE:6E:E6:4F:A6:34:02:21:38:7D:A7:0D:9D: 6A:48:30:C1:7D:02:21:00:F5:E8:C9:63:5E:F5:82:C3: C8:55:7A:F1:0B:3B:D7:50:DE:A7:4C:C7:9B:A6:AB:58: E9:48:9D:08:50:2B:73:B3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Oct 8 06:10:50.006 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:28:A2:9C:79:53:D5:78:A3:38:9F:EC:FB: 38:76:BA:B6:61:C7:45:2D:9D:85:77:90:E5:BE:06:62: 6A:49:FF:73:02:21:00:A0:6B:CB:70:59:F6:8E:8B:19: 96:19:4A:B6:D0:09:E2:1E:BE:A4:47:AA:38:B1:7D:15: 7F:95:15:20:3C:A8:86 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Oct 8 06:10:50.159 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8B:61:43:6F:29:DC:6F:6D:DC:5F:A2: 8A:30:EE:0B:45:AD:A3:E3:08:52:10:52:F8:26:BD:B0: C4:E5:1F:E8:2F:02:21:00:8A:F8:F8:52:C1:3B:A3:AD: 10:90:D5:1E:76:87:D0:BB:D5:0A:DE:18:C1:B5:21:56: 5C:48:B8:BF:5A:3F:9C:EB
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-10T05:15:35+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-12-15T00:00:00+00:00
Expires
2032-12-14T23:59:59+00:00
Days remaining
2226
Serial (hex)
0F06BB09306148267FCA1B71C1DB807D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:DC:9E:DC:0F:DD:FA:97:5A:14:32:EF:80:6E:C7:80:07:8B:53:62:AD:45:AF:76:DB:15:C9:07:63:0D:B2:5D
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4084
Serial (hex)
033AF1E6A711A9A0BB2864B11D09FAE5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →