Certificate Summary:

Subject: dns.nextdns.io
Issuer: ZeroSSL ECC Domain Secure Site CA
Expiration: 2026-03-23 23:59:59 UTC
Key Identifier: D3:A6:71:9C:E1:D5:63:D7:7C:77:8A:F7:02:81:0F:96:BE:04:98:73

Download and Install

Received at FYIcenter.com on: 2026-02-13

Certificate Detailed Information:

Name:
/CN=dns.nextdns.io

Subject: 
   Common Name (CN): dns.nextdns.io
   Organizational Unit Name (OU): 
   Organization Name (O): 
   Locality Name (L): 
   State or Province Name (ST): 
   Country Name (C): 
   Email Address: 
Issuer: 
   Common Name (CN): ZeroSSL ECC Domain Secure Site CA
   Organizational Unit Name (OU): 
   Organization Name (O): ZeroSSL
   Locality Name (L): 
   State or Province Name (ST): 
   Country Name (C): AT
   Email Address: 
Valid From: Tue, 23 Dec 2025 00:00:00 +0000 
Valid To: Mon, 23 Mar 2026 23:59:59 +0000 
Serial Number: 0x895EE95B7586C472CA89C9A1F1BBC1EA 
Hash: 24dc5e93 
Version: 2 
Signature Type: ecdsa-with-SHA384 
Purposes:  
   SSL client 
   SSL server 
   Netscape SSL server 
   S/MIME signing 
   S/MIME encryption 
   CRL signing 
   Any Purpose 
   OCSP helper 
   Time Stamp signing 
Extensions:  
   authorityKeyIdentifier:
      keyid:0F:6B:E6:4B:CE:39:47:AE:F6:7E:90:1E:79:F0:30:91:92:C8:5F:A3
 
   subjectKeyIdentifier:
      D3:A6:71:9C:E1:D5:63:D7:7C:77:8A:F7:02:81:0F:96:BE:04:98:73 
   keyUsage:
      Digital Signature 
   basicConstraints:
      CA:FALSE 
   extendedKeyUsage:
      TLS Web Server Authentication 
   certificatePolicies:
      Policy: 1.3.6.1.4.1.6449.1.2.2.78
  CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
 
   authorityInfoAccess:
      CA Issuers - URI:http://zerossl.crt.sectigo.com/ZeroSSLECCDomainSecureSiteCA.crt
OCSP - URI:http://zerossl.ocsp.sectigo.com
 
   tlsfeature:
      status_request 
   ct_precert_scts:
      Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
    Timestamp : Dec 23 04:00:15.051 2025 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:44:02:20:0E:12:1B:16:18:0B:E4:4D:B8:09:83:FC:
                06:74:DB:CB:86:E5:DA:55:AD:FE:A3:7F:78:82:5E:B2:
                64:C6:CD:A6:02:20:05:28:D1:F4:83:5A:25:83:BD:C2:
                C2:B2:9A:A1:EE:77:BE:53:3C:67:76:17:53:16:68:F4:
                95:E3:97:C5:49:66
Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : D1:6E:A9:A5:68:07:7E:66:35:A0:3F:37:A5:DD:BC:03:
                A5:3C:41:12:14:D4:88:18:F5:E9:31:B3:23:CB:95:04
    Timestamp : Dec 23 04:00:15.237 2025 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:46:02:21:00:A2:E5:94:9E:22:BB:E2:80:0B:6F:35:
                79:91:EF:2B:46:F1:CF:DA:9F:DF:71:95:9A:CD:C3:A9:
                1D:F9:99:1D:51:02:21:00:E1:8D:0F:03:8E:48:4E:98:
                28:C1:74:DF:8E:7C:B5:3B:BE:29:55:14:03:86:FB:3C:
                CD:DE:8A:2D:83:6F:22:14 
   subjectAltName:
      DNS:dns.nextdns.io, DNS:*.dns.nextdns.io 

Certificate in PEM Format:

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Related Certificate(s):

ID      Subject          Issuer           Expiration Key Identifier   Relation   
        dns.nextdns.io   ZeroSSL ECC Dom… 2026-03-23 D3A6719CE1D563D… This Cert
        --------------------------------------------------
10575   ZeroSSL ECC Dom… USERTrust ECC C… 2030-01-29 0F6BE64BCE3947A… Parent Cert
15692   dns.nextdns.io   ZeroSSL ECC Dom… 2023-09-26 C5DFDD57DB56595… Same Subject

Public Key Detailed Information:

Key Details:
   Type: EC
   Size (bits): 256
   Curve Name: 
prime256v1
   Curve OID: 
1.2.840.10045.3.1.7
   Public key (x): 
22da82dc3300714069eb5c0751d97acbd6691ef977722df29a07497dc694f5b7
   Public key (y): 
b2900e45f5ed8aca767b5a773afdcc0eea2f171880d9d8d7cd8075f072e533b6

Public Key in PEM Format:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEItqC3DMAcUBp61wHUdl6y9ZpHvl3
ci3ymgdJfcaU9beykA5F9e2KynZ7Wnc6/cwO6i8XGIDZ2NfNgHXwcuUztg==
-----END PUBLIC KEY-----

Identical or Similar Keys: We found that the public key in this certificate matches key(s) recorded previously.

ID      Type Size Pri/Pub Key Identifier   Date       Comparison 
32357   EC   256  Public  D3A6719CE1D563D… 2026-02-13 Same Key ID