DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dns.google · 8.8.8.8:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=dns.google
Issuer
C=US O=Google Trust Services CN=WR2
Valid from
2026-09-04T08:06:55+00:00
Expires
2026-11-27T08:06:54+00:00
Days remaining
68
Serial (hex)
AD7599BA85AE65CA0A7C0F6EA1059FB6
Signature
RSA-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:dns.google, DNS:dns.google.com, DNS:*.dns.google.com, DNS:8888.google, DNS:dns64.dns.google, IP Address:8.8.8.8, IP Address:8.8.4.4, IP Address:8.8.8.53, IP Address:2001:4860:4860:0:0:0:0:8888, IP Address:2001:4860:4860:0:0:0:0:8844, IP Address:2001:4860:4860:0:0:0:0:6464, IP Address:2001:4860:4860:0:0:0:0:64

SHA-256 fingerprint

B6:79:F7:4D:2B:7A:FA:BC:25:29:0B:A4:DE:68:17:9D:EE:9D:5F:19:27:1E:B0:76:D8:70:89:34:85:4F:98:40
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
88:84:97:59:03:E2:B3:48:5E:99:0C:44:97:43:CB:16:94:4E:5E:3B
authorityKeyIdentifier
DE:1B:1E:ED:79:15:D4:3E:37:24:C3:21:BB:EC:34:39:6D:42:B2:30
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/wr2.crt
subjectAltName
DNS:dns.google, DNS:dns.google.com, DNS:*.dns.google.com, DNS:8888.google, DNS:dns64.dns.google, IP Address:8.8.8.8, IP Address:8.8.4.4, IP Address:8.8.8.53, IP Address:2001:4860:4860:0:0:0:0:8888, IP Address:2001:4860:4860:0:0:0:0:8844, IP Address:2001:4860:4860:0:0:0:0:6464, IP Address:2001:4860:4860:0:0:0:0:64
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://c.pki.goog/wr2/GSyT1N4PBrg.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 4 09:06:56.582 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:64:8E:A0:74:21:21:3E:8C:7D:F0:B9:7D: 39:4F:70:88:0E:BD:CB:B1:F9:6A:5B:36:CB:CA:59:AA: 56:63:9D:F7:02:20:2E:6D:92:00:C9:BF:12:29:36:22: 37:94:42:37:85:56:F2:47:3D:92:9A:AE:06:6E:FD:70: E9:03:7A:FD:5D:D4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 25:B7:EF:DE:A1:13:01:93:ED:93:07:97:70:AA:32:2A: 26:62:0D:E3:5A:C8:AA:7C:75:19:7D:E0:B1:A9:E0:65 Timestamp : Sep 4 09:06:56.692 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:80:6A:C3:87:B0:DC:5C:84:BF:6F:D4: 6A:3C:FF:62:BF:A9:4B:24:C9:77:82:F1:85:B9:15:5C: 42:DC:7B:BF:69:02:21:00:E6:32:D0:60:EF:75:2B:39: F6:30:B5:2B:F8:8F:C3:8E:1C:81:42:F6:1D:73:00:AB: 83:DF:D9:87:D3:18:FA:AC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-20T01:11:01+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Google Trust Services CN=WR2
Issuer
C=US O=Google Trust Services LLC CN=GTS Root R1
Valid from
2023-12-13T09:00:00+00:00
Expires
2029-02-20T14:00:00+00:00
Days remaining
884
Serial (hex)
7FF005A07C4CDED100AD9D66A5107B98
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E6:FE:22:BF:45:E4:F0:D3:B8:5C:59:E0:2C:0F:49:54:18:E1:EB:8D:32:10:F7:88:D4:8C:D5:E1:CB:54:7C:D4
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
DE:1B:1E:ED:79:15:D4:3E:37:24:C3:21:BB:EC:34:39:6D:42:B2:30
authorityKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/r1.crt
crlDistributionPoints
Full Name: URI:http://c.pki.goog/r/r1.crl
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Google Trust Services LLC CN=GTS Root R1
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2020-06-19T00:00:42+00:00
Expires
2028-01-28T00:00:42+00:00
Days remaining
494
Serial (hex)
77BD0D6CDB36F91AEA210FC4F058D30D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

3E:E0:27:8D:F7:1F:A3:C1:25:C4:CD:48:7F:01:D7:74:69:4E:6F:C5:7E:0C:D9:4C:24:EF:D7:69:13:39:18:E5
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.pki.goog/gsr1 CA Issuers - URI:http://pki.goog/gsr1/gsr1.crt
crlDistributionPoints
Full Name: URI:http://crl.pki.goog/gsr1/gsr1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.11129.2.5.3.2 Policy: 1.3.6.1.4.1.11129.2.5.3.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →