DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

zscaler.com · 184.32.100.93:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=US jurisdictionST=Delaware businessCategory=Private Organization serialNumber=4431830 C=US ST=California L=San Jose O=Zscaler, Inc. CN=www.zscaler.com
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2026-01-27T00:00:00+00:00
Expires
2027-02-24T23:59:59+00:00
Days remaining
155
Serial (hex)
0F6D4E850D9A9087BC61A44D6B3B1686
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.zscaler.com, DNS:zscaler.com, DNS:cms.zscaler.com

SHA-256 fingerprint

C4:FB:8F:62:E6:E0:7D:EA:9A:6D:31:BC:EB:F1:34:79:DF:FA:53:77:F6:71:53:81:2E:76:3B:0C:22:5D:88:AA
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
13:C7:C2:90:56:D9:94:4A:A1:47:CD:6E:59:E9:A2:89:BF:B4:76:7E
subjectAltName
DNS:www.zscaler.com, DNS:zscaler.com, DNS:cms.zscaler.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 27 10:54:27.031 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9A:48:33:BC:44:AE:1D:18:7C:3F:F9: 8B:5E:A3:08:4D:40:0E:C1:41:24:C8:67:DF:D8:AA:AB: 44:D8:B4:69:3C:02:20:50:96:4C:4E:D5:A4:90:91:C0: 57:34:4C:FA:3C:F0:DD:63:C8:F2:AD:AB:FF:9D:FF:1F: AE:B0:99:B5:62:0E:D5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 27 10:54:27.025 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E2:A7:DB:BC:D8:EE:6D:9E:60:91:6B: 53:64:BB:05:90:94:95:E3:77:24:D6:9F:A9:BF:D3:A6: 9B:E3:2E:AE:74:02:20:09:AF:F7:44:C2:BD:A3:C9:24: 90:02:AE:1F:C4:EF:E3:12:C8:DF:F3:C4:E5:C0:EA:9E: 7F:84:2E:31:B0:C5:FD Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 27 10:54:27.216 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:02:F9:38:DD:BA:58:D1:BB:24:D1:69:E3: 7F:27:50:AA:84:39:04:D9:33:7E:F5:6E:27:BD:E3:D5: D0:7F:0F:3B:02:20:21:35:FA:EB:27:47:74:73:C9:B7: 45:DE:D0:60:27:B8:90:FE:FB:C4:5B:23:44:9A:3F:99: 47:58:17:DB:2D:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-22T20:18:44+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1378
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIQAWePH++IIlXYsKcOa3uyIDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMDA3MDIxMjQyNTBaFw0zMDA3MDIxMjQyNTBaMEQxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxHjAcBgNVBAMTFURpZ2lDZXJ0IEVWIFJT
QSBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0eZsx/neTr
f4MXJz0R2fJTIDfN8AwUAu7hy4gI0vp7O8LAAHx2h3bbf8wl+pGMSxaJK9ffDDCD
63FqqFBqE9eTmo3RkgQhlu55a04LsXRLcK6crkBOO0djdonybmhrfGrtBqYvbRat
xenkv0Sg4frhRl4wYh4dnW0LOVRGhbt1G5Q19zm9CqMlq7LlUdAE+6d3a5++ppfG
cnWLmbEVEcLHPAnbl+/iKauQpQlU1Mi+wEBnjE5tK8Q778naXnF+DsedQJ7NEi+b
QoonTHEz9ryeEcUHuQTv7nApa/zCqes5lXn1pMs4LZJ3SVgbkTLj+RbBov/uiwTX
tkBEWawvZH8CAwEAAaOCAgswggIHMB0GA1UdDgQWBBRqTlC/mGidW3sgddRZAXlI
ZpIyBjAfBgNVHSMEGDAWgBROIlQgGJXm427mD/r6uRLtBhePOTAOBgNVHQ8BAf8E
BAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQI
MAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA3oDWgM4YxaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDCBzgYD
VR0gBIHGMIHDMIHABgRVHSAAMIG3MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMIGKBggrBgEFBQcCAjB+DHxBbnkgdXNlIG9mIHRoaXMg
Q2VydGlmaWNhdGUgY29uc3RpdHV0ZXMgYWNjZXB0YW5jZSBvZiB0aGUgUmVseWlu
ZyBQYXJ0eSBBZ3JlZW1lbnQgbG9jYXRlZCBhdCBodHRwczovL3d3dy5kaWdpY2Vy
dC5jb20vcnBhLXVhMA0GCSqGSIb3DQEBCwUAA4IBAQBSMgrCdY2+O9spnYNvwHiG
+9lCJbyELR0UsoLwpzGpSdkHD7pVDDFJm3//B8Es+17T1o5Hat+HRDsvRr7d3MEy
o9iXkkxLhKEgApA2Ft2eZfPrTolc95PwSWnn3FZ8BhdGO4brTA4+zkPSKoMXi/X+
WLBNN29Z/nbCS7H/qLGt7gViEvTIdU8x+H4l/XigZMUDaVmJ+B5d7cwSK7yOoQdf
oIBGmA5Mp4LhMzo52rf//kXPfE3wYIZVHqVuxxlnTkFYmffCX9/Lon7SWaGdg6Rc
k4RHhHLWtmz2lTZ5CEo2ljDsGzCFGJP7oT4q6Q8oFC38irvdKIJ95cUxYzj4tnOI
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →