DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

cf1.ait.com · 162.159.9.94:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.ait.com
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R3 DV TLS CA 2020
Valid from
2025-10-02T11:48:14+00:00
Expires
2026-11-03T11:48:13+00:00
Days remaining
43
Serial (hex)
4E61B2C24F342DF0AA24F1D3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.ait.com, DNS:ait.com

SHA-256 fingerprint

5F:F6:61:17:79:84:17:70:A4:A5:28:A1:D9:DD:E6:8D:A9:A2:DC:39:0C:2C:6A:25:15:1E:99:39:13:CA:EE:39
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr3dvtlsca2020
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.10 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr3dvtlsca2020.crl
subjectAltName
DNS:*.ait.com, DNS:ait.com
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
0D:98:C0:73:7F:AB:BD:BD:D9:47:4B:49:AD:0A:4A:0C:AC:3E:C7:7C
subjectKeyIdentifier
D7:BC:10:39:55:60:1B:30:FB:CB:DF:C1:B1:55:E1:13:68:65:52:E5
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 2 11:48:17.573 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E1:47:EE:4F:F7:77:03:30:4B:57:E7: E1:5A:08:D1:69:84:59:DE:3B:62:B4:1B:1E:95:68:13: 75:F4:65:46:72:02:20:41:20:BD:AE:6D:15:77:14:A0: 08:34:FF:8B:45:87:DF:EC:AB:F2:61:D3:81:FC:E6:06: 6F:AF:A2:8B:40:5D:0F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Oct 2 11:48:17.803 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:08:BF:CE:DA:4F:0B:AD:06:78:7A:02:65: CF:E2:58:23:C6:E0:CE:1F:9A:82:B8:19:9E:02:0F:F9: CE:4C:73:B3:02:20:2C:88:E5:E0:0F:00:E2:B9:0D:72: ED:7D:E1:C9:33:BE:5B:6D:AB:CA:A3:DA:C0:6D:21:8B: 64:7C:42:67:37:21 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 2 11:48:17.562 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:58:23:79:6C:3D:9C:9C:2C:51:01:38:9F: B9:EC:65:DE:EE:8C:82:7B:6E:A9:08:9D:3A:C7:09:85: AE:93:E7:84:02:21:00:C6:24:ED:1D:66:82:99:AE:F7: C9:64:9A:57:0A:53:92:53:E4:82:1A:FA:FA:BC:E8:DF: 79:A1:72:2B:1B:32:AA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-20T12:04:10+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R3 DV TLS CA 2020
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2020-07-28T00:00:00+00:00
Expires
2029-03-18T00:00:00+00:00
Days remaining
909
Serial (hex)
77BD0E0742D5D9E9D049D774D02A6F9A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

76:25:38:43:95:09:C4:11:C4:37:D3:C5:67:56:3E:13:78:67:12:81:FC:4A:14:64:AD:D0:31:87:08:43:67:6E
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
0D:98:C0:73:7F:AB:BD:BD:D9:47:4B:49:AD:0A:4A:0C:AC:3E:C7:7C
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r3.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2018-09-19T00:00:00+00:00
Expires
2028-01-28T12:00:00+00:00
Days remaining
494
Serial (hex)
01EE5F169DFF97352B6465D66A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

44:5E:EC:78:BC:61:21:50:44:A0:37:96:56:AA:2D:5D:B5:E4:2F:76:CB:70:B8:D1:4C:20:77:AA:94:3D:4E:BB
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →