DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

gandi.net · 217.70.185.65:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.gandi.net
Issuer
C=FR O=Gandi SAS CN=GandiCert
Valid from
2026-05-20T00:00:00+00:00
Expires
2026-12-04T23:59:59+00:00
Days remaining
75
Serial (hex)
0ABFB6A84CFAC76AAFEEB4052A305433
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:www.gandi.net, DNS:gandi.net

SHA-256 fingerprint

26:89:F6:35:17:38:94:EE:88:87:30:BC:6E:77:4E:63:98:68:31:46:9F:24:55:40:8B:25:1A:5F:FF:F6:0D:32
Certificate extensions & PEM
authorityKeyIdentifier
BA:BB:46:88:45:EC:DD:5A:2B:18:C5:D1:4E:EC:E3:3C:06:52:53:AC
subjectKeyIdentifier
E9:8E:D2:22:8A:83:73:E5:2D:5E:C0:53:40:0A:F3:4C:F4:D2:78:0A
subjectAltName
DNS:www.gandi.net, DNS:gandi.net
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/GandiCert.crl Full Name: URI:http://crl4.digicert.com/GandiCert.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/GandiCert.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : May 20 13:29:06.526 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3A:C5:67:F3:31:1E:46:5A:32:F9:5F:C6: 91:55:8E:6B:59:51:38:87:86:41:40:DB:3C:7F:53:4C: B3:57:0F:12:02:20:40:20:DB:1B:B5:55:6B:C2:B4:42: BE:6B:F3:BD:4D:8F:B4:0C:11:B0:48:A8:0D:CF:2D:92: 7C:93:F1:86:E2:D1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : May 20 13:29:06.485 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:21:26:B7:06:76:06:F2:DA:7E:96:C3:A2: AC:04:EA:90:6B:A3:A4:73:56:69:F3:57:20:18:DB:7B: 2F:55:5F:D3:02:20:22:15:57:0D:39:12:65:CD:AC:8A: 76:D5:07:09:AF:74:A3:EA:C5:72:CB:BB:1F:DE:5E:CD: 77:CC:A8:40:1B:75 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : May 20 13:29:06.540 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C0:53:EB:53:E5:B3:31:EF:F9:72:0D: C0:57:44:FC:35:5A:8C:C5:26:3E:55:E8:11:13:E7:57: D0:E5:A7:CE:57:02:21:00:AB:C2:AE:3E:46:61:87:47: 7F:A1:25:EF:0C:ED:3F:53:FF:35:78:FF:C9:27:E7:C3: 9C:E2:1D:95:BB:CD:D4:DC
-----BEGIN CERTIFICATE-----
MIIICjCCBfKgAwIBAgIQCr+2qEz6x2qv7rQFKjBUMzANBgkqhkiG9w0BAQsFADA1
MQswCQYDVQQGEwJGUjESMBAGA1UEChMJR2FuZGkgU0FTMRIwEAYDVQQDEwlHYW5k
aUNlcnQwHhcNMjYwNTIwMDAwMDAwWhcNMjYxMjA0MjM1OTU5WjAYMRYwFAYDVQQD
Ew13d3cuZ2FuZGkubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
9b3WA3gHw/HSI2sx6CpOAppefh9hHJoY7cw7xwgA1mo2FJnjeKGYGtZ3FJaFY3pC
bUBvC1hTMg1UrpAg3MhdOBRgh9kFMP2pytFEjZUiSbod6mSYDe/o2QbUOun5/w5x
E3pXhj224n5phXr99y6ubuDb520EO+JNer8JZnnOdUfeUsiX2sxhAX2BpA0Z4F5b
hOB5SDWqPcPxe4Ra7agzQSdRKjinRwQbPenwVZJB/w4VQHzvUALSWCbqyr/dT4k2
574smzbYRmH7+V2KIz+//+bINwVh+gZ6r7i3aV9OeqL49Xejfe253C3+HLjeFdGr
TDbrXo4QNcM1h6KO/5ASInfoGO9cH0AC2fiT3+BHHDP5q+/XiAfFSSdM1Ss7EPpC
qgzRmWQncRBgbepRphqBHT0DJZZaH6zh5BpN5s2emqQc0yJcKko1ZtXSXIWSlFXa
YQRlQjr4GTewfUvdpq/BreDuX+H3XR3fQ/G4MjEqgColn+wmO6PEs9HItE8K2YuL
d+Si8mtV2N7cMQY26XAR17ZyNabXr5WQ2eUmSPjstaDDV7nHUFx8vTmCBY3kRcIs
D97IynxTxDkhtOf7unQDJFvNR1P1yONE4rsAcUZLAobHlTRuuYqN1SY+Yz1v07yF
GEb8bZq+l59LPXFHmL3qefoKIgGECyiRkIuFYB5kb1ECAwEAAaOCAzEwggMtMB8G
A1UdIwQYMBaAFLq7RohF7N1aKxjF0U7s4zwGUlOsMB0GA1UdDgQWBBTpjtIiioNz
5S1ewFNACvNM9NJ4CjAjBgNVHREEHDAagg13d3cuZ2FuZGkubmV0gglnYW5kaS5u
ZXQwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggr
BgEFBQcDATBlBgNVHR8EXjBcMCygKqAohiZodHRwOi8vY3JsMy5kaWdpY2VydC5j
b20vR2FuZGlDZXJ0LmNybDAsoCqgKIYmaHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L0dhbmRpQ2VydC5jcmwwawYIKwYBBQUHAQEEXzBdMCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wNQYIKwYBBQUHMAKGKWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9HYW5kaUNlcnQuY3J0MAwGA1UdEwEB/wQCMAAwggF9Bgor
BgEEAdZ5AgQCBIIBbQSCAWkBZwB1AMIxfldFGaNF7n843rKQQevHwiFaIr9/1bWt
dprZDlLNAAABnkWTXt4AAAQDAEYwRAIgOsVn8zEeRloy+V/GkVWOa1lROIeGQUDb
PH9TTLNXDxICIEAg2xu1VWvCtEK+a/O9TY+0DBGwSKgNzy2SfJPxhuLRAHUA1219
ENGn9XfCx+lf1wC/+YLJM1pl4dCzAXMXwMjFaXcAAAGeRZNetQAABAMARjBEAiAh
JrcGdgby2n6Ww6KsBOqQa6Okc1Zp81cgGNt7L1Vf0wIgIhVXDTkSZc2sinbVBwmv
dKPqxXLLux/eXs13zKhAG3UAdwCUTkOH+uzB74HzGSQmqBhlAcfTXzgCAT9yZ31V
Ny4Z2AAAAZ5Fk17sAAAEAwBIMEYCIQDAU+tT5bMx7/lyDcBXRPw1WozFJj5V6BET
51fQ5afOVwIhAKvCrj5GYYdHf6El7wztP1P/NXj/ySfnw5ziHZW7zdTcMA0GCSqG
SIb3DQEBCwUAA4ICAQAQqwm491q0tBPERUNfuBXDmiuyy/daYAAnpPtaAHK55Fn0
yO7GhGk4SqqZcr1gycgQr4kmW90SQRAbgDqj03Ho7HTJ8thv3wy9p+lSWR1t2s0x
vhO8MHNoHW5eYOe9YlQcw1ktGlI+kcC+0EuPXP4qG6CXVlqxeM2qxSD8uvKFfs6K
xINaczS4304tyBN15TlkgelGf5kI8c3XqfeC4aDNx4+OsA6ZajQcep6tFcxpF815
tcVmzWRlZ0lhaOnKtj89aun0uRbgSDZsUK76N6LYz2oDiLfgb9Vz/y0Aq1JxyKVI
IjahjVyKKcE6a7JQChPGQw3/cscYY20RJWiwmI6Rp50RdErQUpzf1PbDpBNH1Irh
QKjk/oufCL9UgEQ6lwd2B4F0CimPX7od7baoh63uRJexHKgYv1vqrC48PALTOI7Q
pjhYkwBWrFb0kFnJSKdbtcovhgTNH7dQJ8QxnOnGN82LN6tAubnO46FRlYSVo/rf
Q73YHdIWPrP02bzpB5HhPEbBwHPY6MPmkRdTblz07NPQSWcgrzHJm7WaUyKzzG9y
m9adYn4BLQeewwwTea3fHWvoo6EsixUQ5TH5KW2xG6emdyAfzODopGlmPrr6n923
6DnOtANyrcLhnLAnTk4XuZzBYWyDboCD3SqvtUPhNco6ACgvKAGTPmV+mrIauQ==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-20T01:33:52+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=FR O=Gandi SAS CN=GandiCert
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2024-04-17T00:00:00+00:00
Expires
2034-04-16T23:59:59+00:00
Days remaining
2765
Serial (hex)
0B9B5E7F6773AE8C643221657CEE67C1
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

33:37:D4:E4:B4:EF:6A:94:F0:49:15:D2:E8:6B:1F:8F:47:A3:C8:36:67:DA:25:19:D9:B9:5A:E7:27:0A:FF:E1
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
BA:BB:46:88:45:EC:DD:5A:2B:18:C5:D1:4E:EC:E3:3C:06:52:53:AC
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4135
Serial (hex)
033AF1E6A711A9A0BB2864B11D09FAE5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →