DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

fastly.com · 151.101.65.57:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.fastly.com
Issuer
C=US O=Certainly CN=Certainly Intermediate R1
Valid from
2026-09-14T18:37:50+00:00
Expires
2026-10-14T18:37:49+00:00
Days remaining
24
Serial (hex)
79B4DD59F25189D12A403A1118789929652D
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:developer.fastly.com, DNS:fastly.com, DNS:www.fastly.com

SHA-256 fingerprint

85:B9:93:5D:C3:03:31:4D:7D:35:9A:24:8E:0C:95:D4:A5:FF:3F:A3:D8:48:0C:C6:29:ED:57:57:AE:AF:24:E6
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
94:C7:16:22:84:35:C0:97:65:AF:5C:00:5B:9A:C8:B2:9C:89:25:2C
authorityKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityInfoAccess
CA Issuers - URI:http://int-r1.certainly.com
subjectAltName
DNS:developer.fastly.com, DNS:fastly.com, DNS:www.fastly.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crls.certainly.com/17182262453002514/6.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Sep 14 19:36:20.161 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:68:B7:DA:49:D3:50:31:E9:E6:58:FB:3C: 8E:18:7E:47:AC:F7:6D:4B:6B:74:E4:45:07:FB:5E:B2: 10:A2:5C:24:02:20:4F:0F:59:D6:B4:86:3D:48:ED:CF: 87:20:A9:DE:09:C1:E8:5B:78:DF:16:FC:CF:AB:FE:E4: C4:9D:DE:55:D1:D5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 14 19:36:20.663 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2C:FF:39:E9:D0:CC:90:45:27:BD:E1:07: 01:5A:D5:3A:47:D4:FF:2F:FA:85:98:40:C5:E6:F5:B8: B0:7A:94:E4:02:20:5C:8E:45:40:1E:61:45:67:09:F3: E8:86:C2:A3:23:E2:AE:0A:80:84:D7:40:F8:A0:67:05: 3F:25:20:7E:47:1F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-20T07:22:20+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Certainly CN=Certainly Intermediate R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2022-06-22T00:00:00+00:00
Expires
2032-06-21T23:59:59+00:00
Days remaining
2101
Serial (hex)
11831CDE4CB573E5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FE:C4:1E:32:CA:75:C2:95:A6:24:0F:A6:39:D3:AB:E3:BF:B5:CB:13:1D:66:90:E2:33:1A:17:6B:ED:2E:5B:D2
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt.cer
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.49945.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →