DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

zonedns.vn · 103.28.36.29:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=zonedns.vn
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2025-11-30T00:00:00+00:00
Expires
2026-12-17T23:59:59+00:00
Days remaining
59
Serial (hex)
69FF7CC90CB5A9C55073461F2056D67A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:zonedns.vn, DNS:www.zonedns.vn

SHA-256 fingerprint

C9:54:2E:85:60:77:F2:97:E7:16:CA:09:8B:82:2F:E8:77:1C:66:E6:97:9E:B5:54:AF:75:2B:8E:D5:6C:68:46
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
17:15:F4:F1:B3:4B:3A:B8:51:DF:8B:88:B3:D2:1B:07:06:DA:A0:C1
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:zonedns.vn, DNS:www.zonedns.vn
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 30 02:57:01.255 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:56:ED:59:64:C6:18:A6:56:CE:EB:79:7E: 6D:9F:72:F9:BA:98:DD:C5:D5:BD:9E:80:9D:46:58:FF: D6:D0:6C:69:02:21:00:A7:F5:3C:20:E9:7A:6F:F2:C9: 33:0C:70:23:C9:BF:B2:3E:E8:AE:69:C1:72:41:9D:C8: 23:14:FF:B2:21:7E:93 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 30 02:57:01.471 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:31:87:2A:D8:27:A1:A3:64:B7:28:D7:6A: 68:48:D6:00:F8:06:3F:96:80:E3:A7:BB:C9:CF:8E:00: 55:2D:B4:E1:02:21:00:88:A3:1D:86:BA:1F:02:4A:3E: 75:1A:A6:B7:FC:07:B8:E9:12:D7:97:35:40:71:43:0D: EB:EB:AA:3F:17:38:A4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 30 02:57:01.248 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:80:6B:2A:0F:67:24:92:66:09:D0:B2: 7E:B3:60:B8:03:D7:9B:C7:BC:A7:32:BA:0F:5A:7D:88: 16:ED:FE:9F:08:02:20:57:DA:00:18:90:F0:DB:F1:CA: 38:91:05:1A:EC:7A:30:F5:E2:96:58:D6:B7:E2:D7:93: 5E:20:CC:B7:B5:15:13
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIQaf98yQy1qcVQc0YfIFbWejANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTI1MTEzMDAwMDAwMFoXDTI2MTIxNzIzNTk1OVowFTETMBEGA1UEAxMKem9u
ZWRucy52bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL03nGbx8Zez
f861b+s3WyM5bxKIReUG6pkFme/xPfOwWutbbB7VbDmPUiKR/uggBZFWuSYcZyGJ
YbezA+3U07rBwKHIu+tTtfKqUKqpJFJNo2OCqHj74+Y3d41di6+MvYUkJgjHehkw
gfTab71pIZRamuzEh/E6Rc3V4OCLrKQiR7/sGhB7aH9bQ9mmwsibYy6eA0vXcokM
EL/IbZ09S2GGxbQfwC4g1S3YLugT8AatUjVkkZJ92ElHgD/IUu8I4OgvBAFQNmT9
bbrwG1UlRY3sHy1+Ks+wCoVOHUHE4aICcHELnIAVwej9SqlM8MOvYdfCUZyIn+Ya
QnklVd+wFpsCAwEAAaOCAvwwggL4MB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF
4bgBjWHhMB0GA1UdDgQWBBQXFfTxs0s6uFHfi4iz0hsHBtqgwTAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRw
czovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBP
BggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9t
YWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3Auc2VjdGlnby5jb20wJQYDVR0RBB4wHIIKem9uZWRucy52boIOd3d3
LnpvbmVkbnMudm4wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2ANdtfRDRp/V3
wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABmtKxOUcAAAQDAEcwRQIgVu1ZZMYY
plbO63l+bZ9y+bqY3cXVvZ6AnUZY/9bQbGkCIQCn9Twg6Xpv8skzDHAjyb+yPuiu
acFyQZ3IIxT/siF+kwB2AK9niDtXsE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6
AAABmtKxOh8AAAQDAEcwRQIgMYcq2Ceho2S3KNdqaEjWAPgGP5aA46e7yc+OAFUt
tOECIQCIox2Guh8CSj51Gqa3/Ae46RLXlzVAcUMN6+uqPxc4pAB2AKyrMHBs6+yE
MfQT0vSRXxEeQiRDsfKmjE88KzunHgLDAAABmtKxOUAAAAQDAEcwRQIhAIBrKg9n
JJJmCdCyfrNguAPXm8e8pzK6D1p9iBbt/p8IAiBX2gAYkPDb8co4kQUa7How9eKW
WNa34teTXiDMt7UVEzANBgkqhkiG9w0BAQsFAAOCAQEAqQAhZb5RVhu0MRGswT3C
qMtmJ70U3rSZPW/lF5GTMkYc4L/FE9xYPFCHrp3MgXi+qO7XRLToAhxNZffdqSIL
10poYoR+KZuT0nANUB5s7r2O2LQVUgVNXqaPgQz5r6r7l4Ru1jDgOxikk4oK6fEx
qIpeQmxDXOF6OcEmgHnqSmo/L7T0ocvLlC2qJT1VEmY/YM7ckiqIxGE4PH4kllkF
ip11Mxsp2uF+47PQZKxpE9KZuNkzwKAX5QsDZlCBxhMxscz/e5RXO/qiSJmd65Kz
sOcB1ZoKJkeRjorkyPHaAwhbspLX/jz5+zFfnjX3MJ0DwVzIeBxJlh0YivE0M9nE
7w==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-19T23:19:41+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1534
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →