SSL/TLS Certificate Lookup

Check a domain's SSL/TLS certificate — who issued it, when it expires, and whether the chain is trusted

nic.day

SSL/TLS Certificate

WhoisRDAPDNS RecordsCertificateUptimeDiagnosticsHistoryHide Contact Info

SSL/TLS Certificate for nic.day

Valid
Issued by (CA)
Google Trust Services
Subject
*.charlestonroadregistry.com
Valid from
Sep 28, 2026
Valid until
Dec 21, 2026 (64 days remaining)
Public key
EC 256-bit
Serial
3FA0E7C1C3B9035B106C197C4CD101BE
SHA-256 fingerprint
DA:6F:AF:69:68:69:CE:76:9C:64:03:58:AB:EB:6B:EC:68:1F:18:57:36:BF:B6:5E:95:10:42:97:31:65:7A:C5
Chain
WE2 → GTS Root R4
Subject Alternative Names (106)
*.bar.foo, *.charlestonroadregistry.com, *.crr.com, *.googleregistry.co, *.nic.ads, *.nic.android, *.nic.app, *.nic.boo, *.nic.cal, *.nic.channel, *.nic.chrome, *.nic.dad, *.nic.day, *.nic.dclk, *.nic.dev, *.nic.docs, *.nic.drive, *.nic.eat, *.nic.esq, *.nic.fly, *.nic.foo, *.nic.gbiz, *.nic.gle, *.nic.gmail, *.nic.goog, *.nic.google, *.nic.guge, *.nic.hangout, *.nic.here, *.nic.how, *.nic.ing, *.nic.map, *.nic.meet, *.nic.meme, *.nic.mov, *.nic.new, *.nic.nexus, *.nic.page, *.nic.phd, *.nic.play, *.nic.prod, *.nic.prof, *.nic.rsvp, *.nic.search, *.nic.soy, *.nic.xn--flw351e, *.nic.xn--q9jyb4c, *.nic.xn--qcka1pmc, *.nic.youtube, *.nic.zip, bar.foo, charlestonroadregistry.com, crr.com, epp.registry-qa.google, epp.registry-sandbox.google, epp.registry.google, googleregistry.co, nic.ads, nic.android, nic.app, nic.boo, nic.cal, nic.channel, nic.chrome, nic.dad, nic.day, nic.dclk, nic.dev, nic.docs, nic.drive, nic.eat, nic.esq, nic.fly, nic.foo, nic.gbiz, nic.gle, nic.gmail, nic.goog, nic.google, nic.guge, nic.hangout, nic.here, nic.how, nic.ing, nic.map, nic.meet, nic.meme, nic.mov, nic.new, nic.nexus, nic.page, nic.phd, nic.play, nic.prod, nic.prof, nic.rsvp, nic.search, nic.soy, nic.xn--flw351e, nic.xn--q9jyb4c, nic.xn--qcka1pmc, nic.youtube, nic.zip, whois.registry-qa.google, whois.registry-sandbox.google, whois.registry.google

Certificate Authority Authorization (CAA)

The serving CA (Google Trust Services) is authorized by this domain's CAA records (pki.goog).

We've observed 1 previous certificate for this host. This certificate has been served since Oct 7, 2026.

Never get surprised by nic.day's certificate expiring

This is today's certificate. Turn on monitoring and we'll watch nic.day continuously, notifying you the moment anything moves across all three signals:

Certificate monitor showing the issuer, expiry date, chain status, fingerprint, covered names, and a history of a rotation and an expiry warning

Uptime

We visit the site from multiple regions worldwide and email you within minutes if it goes down, with a per-region breakdown so a real outage stands out from a regional blip.

DNS changes

We watch NS, MX, CAA, CNAME, TXT and A/AAAA records, and identify the host, network, and ASN behind them, so a real migration or hijack stands out from routine noise.

TLS certificate

We warn you 30, 14, 7, and 1 days before it expires, and flag it if the issuing authority changes or the certificate is unexpectedly replaced.

Monitor this certificate free

Free for your first domain: uptime, DNS, and certificate together. No credit card.