DNSApe | Fast Network Tools

Settings

Winter snow effect

SSL is valid for stripe.com

Certificate Validity

Validity Period

The time window during which the certificate is valid. Includes 'Valid From' (Not Before) and 'Valid To' (Not After) dates.

Good Values

Let's Encrypt: 90 days. Commercial CAs: up to 398 days (since September 2020). Expiration should be weeks/months away.

Security

Expired certificates cause browser warnings and blocked connections. Short validity periods limit exposure if keys are compromised. Monitor expiration and renew 30+ days early.

The date range during which this certificate is trusted.

Not valid before: Dec  9 00:00:00 2025 GMT
Not valid after:  Mar 26 23:59:59 2026 GMT

Certificate Chain

Certificate Chain

The complete trust path from server certificate through intermediate CAs to a trusted root CA. Each certificate is signed by the one above it.

Good Values

Complete chain: server certificate + 1-2 intermediate CAs + root CA. Root CA in browser trust store. Chain depth of 2-4 certificates is typical.

Security

Browsers verify the entire chain. Incomplete chains (missing intermediates) cause validation failures. Root CAs keep keys offline; intermediates do the signing.

The hierarchy of certificates from the server cert to the root CA.

Certificate chain
 0 s:jurisdictionC=US, jurisdictionST=Delaware, businessCategory=Private Organization, serialNumber=4675506, C=US, ST=California, L=South San Francisco, O=Stripe, Inc, CN=stripe.com
   i:C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Dec  9 00:00:00 2025 GMT; NotAfter: Mar 26 23:59:59 2026 GMT
 1 s:C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
   i:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA384
   v:NotBefore: Apr 14 00:00:00 2021 GMT; NotAfter: Apr 13 23:59:59 2031 GMT
---

Certificate Details

Subject & Issuer

Identifies the entity to which the certificate was issued. Contains Common Name (CN), Organization (O), and other identifying fields.

Good Values

For DV certificates, CN matches a domain in the SAN field. For OV/EV certificates, O contains a verified legal organization name (e.g., 'O=GitHub, Inc.').

Security

The Subject identifies the certificate owner. Browsers verify the domain matches either CN or SANs. Organization info adds trust but DV certificates only verify domain ownership.

Who the certificate was issued to and by whom.

Subject: jurisdictionC=US, jurisdictionST=Delaware, businessCategory=Private Organization, serialNumber=4675506, C=US, ST=California, L=South San Francisco, O=Stripe, Inc, CN=stripe.com
Issuer:  C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1

Connection Details

TLS Connection

SSL/TLS certificates are digital documents that authenticate a website's identity and enable encrypted connections. They contain a public key and identifying information, digitally signed by a trusted Certificate Authority (CA).

History

SSL was developed by Netscape in the mid-1990s. SSL 2.0 (1995) had serious vulnerabilities. SSL 3.0 (1996) was compromised by POODLE in 2014. TLS succeeded SSL: TLS 1.0 (1999), TLS 1.2 (2008), TLS 1.3 (2018, current standard). All SSL versions and TLS 1.0/1.1 are now considered insecure.

TLS version, cipher suite, and verification status.

SSL handshake has read 2937 bytes and written 405 bytes
Verification error: unable to get local issuer certificate
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 20 (unable to get local issuer certificate)

+ Full Certificate (PEM)

The base64-encoded X.509 certificate.

SSL is valid for stripe.com

Not valid before: Dec  9 00:00:00 2025 GMT
Not valid after:  Mar 26 23:59:59 2026 GMT

CONNECTED(00000003)
---
Certificate chain
 0 s:jurisdictionC=US, jurisdictionST=Delaware, businessCategory=Private Organization, serialNumber=4675506, C=US, ST=California, L=South San Francisco, O=Stripe, Inc, CN=stripe.com
   i:C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Dec  9 00:00:00 2025 GMT; NotAfter: Mar 26 23:59:59 2026 GMT
 1 s:C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
   i:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA384
   v:NotBefore: Apr 14 00:00:00 2021 GMT; NotAfter: Apr 13 23:59:59 2031 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=jurisdictionC=US, jurisdictionST=Delaware, businessCategory=Private Organization, serialNumber=4675506, C=US, ST=California, L=South San Francisco, O=Stripe, Inc, CN=stripe.com
issuer=C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2937 bytes and written 405 bytes
Verification error: unable to get local issuer certificate
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 20 (unable to get local issuer certificate)
---

Your IP: 216.73.216.115

About DNSApe

DNSApe is a fast, no-nonsense network diagnostics toolkit built for developers, sysadmins, and security researchers.

Version History

2.0 - 2025-12-19

Complete rewrite

Rebuilt with Laravel 12, Livewire 3, and Tailwind CSS 4
Live ping monitoring with real-time Chart.js visualization
Email Security tool: SPF, DKIM, DMARC validation
REST API with JSON responses (60 req/min)
MCP server for AI assistant integration (Claude, ChatGPT, etc.)
Slack integration with /dns, /whois, /ssl slash commands
Help tooltips explaining each tool and record type
Shareable ping sessions with unique URLs
Pretty/Raw view toggle with persistent preference
Browser-based ping for client-side latency testing
Enhanced WHOIS with domain + IP info combined
Improved SSL certificate error handling
Full-width responsive layout

Version 2.1 with performance improvements and bug fixes coming soon.

1.1.3 - 2019-04-30

Moved to new infrastructure, resolving most DNS Traversal issues
Replaced RBL with SSL validation tool

1.1.2 - 2019-04-17

Fixed DNS Traversal issue causing many requests to fail

1.1.1 - 2019-04-16

Minor UI adjustments
Added links to lookups in DNS results
Updated dependencies
Increased session timeout to 1 week to eliminate 419 errors
Updated IP address display
Removed dnsape.com as default lookup

1.1 - 2019-02-15

Several UI adjustments
Dark mode setting is persistent between sessions via cookie
Added GDPR cookie banner for session cookies
Added tool to show client IP in lookup field (settings menu)
Keyboard shortcuts for tools, focusing, text size, copying URLs
Shareable lookup URLs - browser address changes with tool usage
Added links to Github repo and feature voting
Several error handling and bug fixes

1.0.7 - 2019-01-11

Fixed HTTP Headers issue with multiple HTTPS redirects

1.0.6 - 2019-01-09

HTTP Headers now forward to and display HTTPS headers
UI adjustments

1.0.5 - 2019-01-08

Dark Mode!

1.0.4 - 2019-01-07

TLD and subdomain validation fixes

1.0.3 - 2019-01-06

Updated DNS Cache host list
IP address validation improvements
Fixed progress bar bug with failed queries
UI adjustments

1.0.2 - 2019-01-05

IPWhois and Ping now work with IP addresses as well as hostnames
Several validation enhancements reduce errors for many lookups
Several UI adjustments

1.0.1 - 2019-01-04

Added Recent Updates panel
Fixed Whois search for many TLDs
Fixed DNS Traversal for many TLDs
Changed to fluid viewport width
Added Privacy Policy

1.0 - 2019-01-02

Initial release