DNSApe | Fast Network Tools

Settings

Winter snow effect

SSL is valid for amazon.com

Certificate Validity

Validity Period

The time window during which the certificate is valid. Includes 'Valid From' (Not Before) and 'Valid To' (Not After) dates.

Good Values

Let's Encrypt: 90 days. Commercial CAs: up to 398 days (since September 2020). Expiration should be weeks/months away.

Security

Expired certificates cause browser warnings and blocked connections. Short validity periods limit exposure if keys are compromised. Monitor expiration and renew 30+ days early.

The date range during which this certificate is trusted.

Not valid before: Nov  6 00:00:00 2025 GMT
Not valid after:  Sep 21 23:59:59 2026 GMT

Certificate Chain

Certificate Chain

The complete trust path from server certificate through intermediate CAs to a trusted root CA. Each certificate is signed by the one above it.

Good Values

Complete chain: server certificate + 1-2 intermediate CAs + root CA. Root CA in browser trust store. Chain depth of 2-4 certificates is typical.

Security

Browsers verify the entire chain. Incomplete chains (missing intermediates) cause validation failures. Root CAs keep keys offline; intermediates do the signing.

The hierarchy of certificates from the server cert to the root CA.

Certificate chain
 0 s:CN=*.peg.a2z.com
   i:C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Nov  6 00:00:00 2025 GMT; NotAfter: Sep 21 23:59:59 2026 GMT
 1 s:C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
   i:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Aug  1 12:00:00 2013 GMT; NotAfter: Aug  1 12:00:00 2028 GMT
 2 s:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
   i:C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Apr  3 00:00:00 2018 GMT; NotAfter: Apr  2 23:59:59 2028 GMT
---

Certificate Details

Subject & Issuer

Identifies the entity to which the certificate was issued. Contains Common Name (CN), Organization (O), and other identifying fields.

Good Values

For DV certificates, CN matches a domain in the SAN field. For OV/EV certificates, O contains a verified legal organization name (e.g., 'O=GitHub, Inc.').

Security

The Subject identifies the certificate owner. Browsers verify the domain matches either CN or SANs. Organization info adds trust but DV certificates only verify domain ownership.

Who the certificate was issued to and by whom.

Subject: CN=*.peg.a2z.com
Issuer:  C=US, O=DigiCert Inc, CN=DigiCert Global CA G2

Connection Details

TLS Connection

SSL/TLS certificates are digital documents that authenticate a website's identity and enable encrypted connections. They contain a public key and identifying information, digitally signed by a trusted Certificate Authority (CA).

History

SSL was developed by Netscape in the mid-1990s. SSL 2.0 (1995) had serious vulnerabilities. SSL 3.0 (1996) was compromised by POODLE in 2014. TLS succeeded SSL: TLS 1.0 (1999), TLS 1.2 (2008), TLS 1.3 (2018, current standard). All SSL versions and TLS 1.0/1.1 are now considered insecure.

TLS version, cipher suite, and verification status.

SSL handshake has read 5692 bytes and written 389 bytes
Verification error: unable to get local issuer certificate
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 20 (unable to get local issuer certificate)

+ Full Certificate (PEM)

The base64-encoded X.509 certificate.

SSL is valid for amazon.com

Not valid before: Nov  6 00:00:00 2025 GMT
Not valid after:  Sep 21 23:59:59 2026 GMT

CONNECTED(00000003)
---
Certificate chain
 0 s:CN=*.peg.a2z.com
   i:C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Nov  6 00:00:00 2025 GMT; NotAfter: Sep 21 23:59:59 2026 GMT
 1 s:C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
   i:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Aug  1 12:00:00 2013 GMT; NotAfter: Aug  1 12:00:00 2028 GMT
 2 s:C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
   i:C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Apr  3 00:00:00 2018 GMT; NotAfter: Apr  2 23:59:59 2028 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN=*.peg.a2z.com
issuer=C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5692 bytes and written 389 bytes
Verification error: unable to get local issuer certificate
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 20 (unable to get local issuer certificate)
---

Your IP: 216.73.216.115

About DNSApe

DNSApe is a fast, no-nonsense network diagnostics toolkit built for developers, sysadmins, and security researchers.

Version History

2.0 - 2025-12-21

Complete rewrite

Rebuilt with Laravel 12, Livewire 3, and Tailwind CSS 4
Live ping monitoring with real-time Chart.js visualization
Email Security tool: SPF, DKIM, DMARC validation
REST API with JSON responses (60 req/min)
MCP server for AI assistant integration (Claude, ChatGPT, etc.)
Slack integration with /dns, /whois, /ssl slash commands
Help tooltips explaining each tool and record type
Shareable ping sessions with unique URLs
Pretty/Raw view toggle with persistent preference
Browser-based ping for client-side latency testing
Enhanced WHOIS with domain + IP info combined
Improved SSL certificate error handling

Version 2.1 with performance improvements and bug fixes coming soon.

1.1.3 - 2019-04-30

Moved to new infrastructure, resolving most DNS Traversal issues
Replaced RBL with SSL validation tool

1.1.2 - 2019-04-17

Fixed DNS Traversal issue causing many requests to fail

1.1.1 - 2019-04-16

Minor UI adjustments
Added links to lookups in DNS results
Updated dependencies
Increased session timeout to 1 week to eliminate 419 errors
Updated IP address display
Removed dnsape.com as default lookup

1.1 - 2019-02-15

Several UI adjustments
Dark mode setting is persistent between sessions via cookie
Added GDPR cookie banner for session cookies
Added tool to show client IP in lookup field (settings menu)
Keyboard shortcuts for tools, focusing, text size, copying URLs
Shareable lookup URLs - browser address changes with tool usage
Added links to Github repo and feature voting
Several error handling and bug fixes

1.0.7 - 2019-01-11

Fixed HTTP Headers issue with multiple HTTPS redirects

1.0.6 - 2019-01-09

HTTP Headers now forward to and display HTTPS headers
UI adjustments

1.0.5 - 2019-01-08

Dark Mode!

1.0.4 - 2019-01-07

TLD and subdomain validation fixes

1.0.3 - 2019-01-06

Updated DNS Cache host list
IP address validation improvements
Fixed progress bar bug with failed queries
UI adjustments

1.0.2 - 2019-01-05

IPWhois and Ping now work with IP addresses as well as hostnames
Several validation enhancements reduce errors for many lookups
Several UI adjustments

1.0.1 - 2019-01-04

Added Recent Updates panel
Fixed Whois search for many TLDs
Fixed DNS Traversal for many TLDs
Changed to fluid viewport width
Added Privacy Policy

1.0 - 2019-01-02

Initial release