THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ironport.com · 104.97.14.219:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`a248.e.akamai.net' did not match expected CN=`ironport.com'

Certificate verification failed

Subject
C=US ST=Massachusetts L=Cambridge O=Akamai Technologies, Inc. CN=a248.e.akamai.net
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2025-12-22T00:00:00+00:00
Expires
2026-12-22T23:59:59+00:00
Days remaining
93
Serial (hex)
0373AB420F54941B555742D9AC890626
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:a248.e.akamai.net, DNS:*.akamaized.net, DNS:*.akamaized-staging.net, DNS:*.akamaihd.net, DNS:*.akamaihd-staging.net

SHA-256 fingerprint

79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
AF:32:47:F9:A9:4B:62:58:E3:13:38:8B:8A:C5:EA:79:6B:5D:61:B4
subjectAltName
DNS:a248.e.akamai.net, DNS:*.akamaized.net, DNS:*.akamaized-staging.net, DNS:*.akamaihd.net, DNS:*.akamaihd-staging.net
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Dec 22 17:47:38.405 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:9E:EF:2E:14:C8:16:8F:7A:20:A9:A8: 24:22:AB:11:A0:F2:63:FA:71:34:98:93:D7:41:AA:90: 73:8A:02:D1:8F:02:21:00:F1:67:B1:E6:0C:2D:4E:A5: AD:5D:F7:E7:8E:E9:01:54:4E:BC:80:68:30:AF:C2:DB: C7:CA:BC:6C:B9:F6:8C:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Dec 22 17:47:38.462 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1E:2B:F3:B2:85:19:98:C5:32:D6:D2:54: 2F:89:F4:90:6C:D0:14:70:E7:F1:AA:5F:8C:A0:AD:E5: 93:20:20:82:02:21:00:F4:18:2E:B3:8C:AD:62:4E:93: BE:61:AD:85:9D:1F:1F:28:9B:72:7C:F9:D1:6B:47:4D: B7:34:B3:36:7F:F3:67 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Dec 22 17:47:38.419 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:88:48:0D:4A:D5:AF:50:1A:64:5A:26: E7:E7:0D:C8:36:10:3E:A0:E1:4A:0B:E8:6A:D2:AA:39: 7F:6A:A3:03:80:02:21:00:81:09:DF:EC:5F:AB:03:A7: A5:75:ED:41:49:05:A6:3A:96:39:88:0B:AB:3D:27:BD: 99:5A:DE:AF:C7:42:9F:AC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-20T15:06:59+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1666
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →