DNSSSL certificate
TLSv1.3hetzner.de · 213.133.116.44:443
The certificate expires within 30 days.
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=*.hetzner.de
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
- Valid from
- 2025-09-12T00:00:00+00:00
- Expires
- 2026-10-08T23:59:59+00:00
- Days remaining
- 18
- Serial (hex)
- 045EF13A613DE46155753308CC87041E
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:*.hetzner.de, DNS:hetzner.de
SHA-256 fingerprint
34:8A:53:0C:13:05:21:91:FE:64:27:37:CF:3F:34:07:55:1C:9F:0D:ED:5B:05:B6:5A:77:9C:DC:AA:F9:E4:73
Certificate extensions & PEM
- authorityKeyIdentifier
- A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
- subjectKeyIdentifier
- A9:3D:C5:D6:D4:DE:81:2B:B1:FF:AA:87:B3:2C:D9:26:DF:70:F7:07
- subjectAltName
- DNS:*.hetzner.de, DNS:hetzner.de
- certificatePolicies
- Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- crlDistributionPoints
- Full Name: URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
- authorityInfoAccess
- OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Sep 12 07:30:28.339 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:17:98:0A:9C:BE:CD:CA:22:FB:14:EA:D7: D4:EE:C3:C8:D7:E4:99:4D:98:C5:48:AC:68:B9:1A:9D: 64:C3:31:9A:02:21:00:F5:F2:6E:B9:3B:E9:51:AB:F5: F1:69:B7:CB:9C:20:99:89:1A:09:5E:2D:17:57:67:C1: 8E:E2:D3:FB:F2:C6:89 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Sep 12 07:30:28.320 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5F:3F:4F:06:96:38:62:A2:82:33:AD:E8: 29:5F:C0:55:26:14:56:96:13:77:F2:30:B1:F5:1E:A2: 0D:53:D6:C5:02:20:3F:EA:8F:7E:65:5B:A8:55:85:5F: 5B:8C:F4:49:87:C8:E3:4F:5C:5F:AB:CD:E0:E7:6A:E8: C2:F4:E5:36:C9:83 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 12 07:30:28.335 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CE:7A:B1:3E:19:A4:8C:C5:08:91:4C: 61:90:C6:9A:31:73:59:1F:4E:FF:AC:80:32:FE:C3:F3: D1:C9:92:44:F7:02:20:2F:58:33:E6:46:BD:65:75:84: AC:4B:D9:E1:6F:59:50:D2:C7:17:3B:CD:9C:16:11:99: 7B:52:53:EA:B6:0B:48
-----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIQBF7xOmE95GFVdTMIzIcEHjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0yNTA5MTIwMDAwMDBaFw0yNjEwMDgyMzU5NTlaMBcxFTATBgNVBAMMDCouaGV0 em5lci5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK5AuB1s2eR3 SWIhdRj6R/eZRvZ9iW7OrvlV/89jZMiN1Ojqp0WnkGutnpscrxhi9voj1ZLPylKz TuyUXGklaSZTVWo/euoq2pxFfmrjWFwqutwT9vUbkHAKprYpnmJ3dqjaDva6K6hE mLXni6ikKxKEVDDCfok5m1gk4d3QP2LAx1b3loszMRrH+29SQm6uCiDW88OwZjF1 leyKjjhxkfshciS/SnDRNSGdpaTK8wN3IkYx5erLwBSy01+mEA2m6gptlRgDAd2E W/7izc1z2WkKQ6bhN3VyG6aefhCLCOhWVakGaBimesT8wL+kRU2mwBroZ4/coGRc WML+DaVMORj2lv7KyTZAsSUD1/cSabHdtthm2nTvebPgnT7CWlNz+TU7nDj7XdoN kjtQxRCTHJ3EkwVE45l1dEZfvCqqXWyRRXoVz3vwtoX9jNNS8+xK6p3fZVYS9CBx SFYduF5IyvqTuwgTxNG9s/8+wsvREIgJb1GoIpSZMkcgaPwGXKvbE0a2XreoRgMK WMEhaPJzLm6yJExmDssP/78yyyCRfn4c/kRcjY9whwBHp+/PX8ein4ovF+5i7Wbg pZSWOH94uqhfb6bOT2NYeBF53cku3E9d89ZWfjOL/KHBSCrYMPav/yZakYw28imH wZGQWnKRTij90zKCgkWTzBYV+aUDzyzBAgMBAAGjggMWMIIDEjAfBgNVHSMEGDAW gBSljP4yzOsPLNQZxgi4ACSIXcPFtzAdBgNVHQ4EFgQUqT3F1tTegSux/6qHsyzZ Jt9w9wcwIwYDVR0RBBwwGoIMKi5oZXR6bmVyLmRlggpoZXR6bmVyLmRlMD4GA1Ud IAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jZHAudGhhd3RlLmNv bS9UaGF3dGVUTFNSU0FDQUcxLmNybDBwBggrBgEFBQcBAQRkMGIwJAYIKwYBBQUH MAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6BggrBgEFBQcwAoYuaHR0cDov L2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNydDAMBgNVHRMB Af8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDYCVU7lE96/8gWGW+U T4WrsPj8XodVJg8V0S5yu0VLFAAAAZk81S9zAAAEAwBHMEUCIBeYCpy+zcoi+xTq 19Tuw8jX5JlNmMVIrGi5Gp1kwzGaAiEA9fJuuTvpUav18Wm3y5wgmYkaCV4tF1dn wY7i0/vyxokAdQDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1rXaa2Q5SzQAAAZk8 1S9gAAAEAwBGMEQCIF8/TwaWOGKigjOt6ClfwFUmFFaWE3fyMLH1HqINU9bFAiA/ 6o9+ZVuoVYVfW4z0SYfI409cX6vN4Odq6ML05TbJgwB2AJROQ4f67MHvgfMZJCao GGUBx9NfOAIBP3JnfVU3LhnYAAABmTzVL28AAAQDAEcwRQIhAM56sT4ZpIzFCJFM YZDGmjFzWR9O/6yAMv7D89HJkkT3AiAvWDPmRr1ldYSsS9nhb1lQ0scXO82cFhGZ e1JT6rYLSDANBgkqhkiG9w0BAQsFAAOCAQEAf0WxruwbW9EmJn6bMVd2g+SmCqQ0 oVWRyIizQoJnUmzrADw6e3y+yNC+WIQxfbgckqE4nZHF2gFdVlPhEZw3FlFMc/YO I2ILrTm1WLtGrkHtNcOGmGn5/Ifsv1LOk8ozOjWgkj24PpEPzz6gGqIVxmU/n3Qv /RKOZ3TPCnMBlH2qR/d+R9lJYae+tJ5bY3jaF62IBJVd3tAt+x2xu6G0qqo0bVte fhtw3lYPx4n5I3M/q2VH7V1U/+3OPeY8AriP7ja1bEGqfepTcNx1fwaEGgSqgm9V 7RwEAg59ZopmYdveY1gFpusSU7JqEhUW2IZ+ZOSTgjGjDVZ4fc8bgJjm0Q== -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-20T07:22:26+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Valid from
- 2017-11-02T12:24:25+00:00
- Expires
- 2027-11-02T12:24:25+00:00
- Days remaining
- 408
- Serial (hex)
- 090EE8C5DE5BFA62D2AE2FF7097C4857
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2
Certificate extensions & PEM
- subjectKeyIdentifier
- A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
- authorityKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
- certificatePolicies
- Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE----- MIIEizCCA3OgAwIBAgIQCQ7oxd5b+mLSri/3CXxIVzANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjI0MjVaFw0yNzExMDIxMjI0MjVaMF4xCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHTAbBgNVBAMTFFRoYXd0ZSBUTFMgUlNBIENBIEcxMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxjngmPhVetC0b/ozbYJdzOBUA1sMog47030cAP+P 23ANUN8grXECL8NhDEF4F1R9tL0wY0mczHaR0a7lYanlxtwWo1s2uGnnyDs6mOCs 66ew2w3YETr6Tb14xgjpu1gGFtAeewaikO9Fud8hxGJTSwn8xeNkfKVWpD2L4vFN 36FNgxeilK6aE4ykgGAzNlokTp6hNOLAYpDySdLAPKzuJSQ7JCEZ6O+SDKywIdXL oMTnpxuBKGSG88NWTo3CHCOGmQECia2yqdPDjgLqnEiYNjwQL8uMqj8rOvlMgviB cHA7xty+7/uYLN6ZS7Vq1/F/lVhVOf5ej6jZdmB85szFbQIDAQABo4IBQDCCATww HQYDVR0OBBYEFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB8GA1UdIwQYMBaAFE4iVCAY lebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQo MCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8E OzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxSb290RzIuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQC6 km0KA4sTb2VYpEBm/uL2HL/pZX9B7L/hbJ4NcoBe7V56oCnt7aeIo8sMjCRWTCWZ D1dY0+2KZOC1dKj8d1VXXAtnjytDDuPPf6/iow0mYQTO/GAg/MLyL6CDm3FzDB8V tsH/aeMgP6pgD1XQqz+haDnfnJTKBuxhcpnx3Adbleue/QnPf1hHYa8L+Rv8Pi5U h4V9FwHOfphdMXOxi14OqmsiTbc5cOs9/uukH+YVsuFdWTna6IVw1qh+tEtyH16R vmi7pkqyZYULOPMIE7avrljVVBZuikwARtY8tCVV6Pp9l3VeagBqb2ffgqNJt3C0 TYNYQI+BXG1R1cABlold -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.