DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nic.ch · 130.59.31.80:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=CH jurisdictionST=Bern businessCategory=Private Organization serialNumber=CHE-101.494.993 C=CH L=Zürich O=SWITCH CN=www.nic.ch
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2026-06-05T00:00:00+00:00
Expires
2026-12-20T23:59:59+00:00
Days remaining
91
Serial (hex)
06CA0DE078DF6314416692480B88FD92
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.nic.ch, DNS:nic.ch, DNS:cms.www.nic.ch

SHA-256 fingerprint

BB:17:E8:58:73:FB:69:1A:14:DB:79:98:50:25:FB:AA:90:F6:F8:EA:7E:23:3F:0D:D5:5E:72:D9:1E:10:77:AE
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
C5:F8:61:2A:E5:C3:B2:2E:07:CC:84:B1:23:49:DE:16:5C:C8:15:69
subjectAltName
DNS:www.nic.ch, DNS:nic.ch, DNS:cms.www.nic.ch
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Jun 5 07:37:06.674 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0E:1F:D9:86:1D:C6:E3:26:14:C0:4F:72: 2D:B4:A5:8B:20:63:A6:2F:42:0E:C2:D6:1E:0C:36:5D: 0C:65:BB:70:02:20:48:DB:A5:C7:CC:B3:AC:BD:87:B3: CC:7A:40:86:50:63:52:F4:BF:4A:40:EF:4C:CD:69:38: CD:90:C5:BE:94:7C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 5 07:37:06.728 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FF:D5:DD:01:CD:03:66:A3:68:51:52: B2:81:7A:1F:58:7E:F7:CE:C0:8B:F2:4F:A6:DC:ED:AB: B7:44:66:7D:64:02:21:00:A8:1B:F2:F4:48:3C:B7:E7: CA:5D:81:7A:80:F1:FC:22:BF:7F:1D:63:B1:8D:D1:4D: 3C:88:03:82:E9:E4:69:20 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Jun 5 07:37:06.692 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:80:3F:92:D5:99:3B:28:84:DE:7F:90: F2:5C:F6:0D:9C:14:CA:B3:C2:CE:73:84:33:02:D1:F1: 61:08:CC:DF:7A:02:21:00:E0:25:C2:30:68:22:B2:11: 61:93:3A:EC:B3:FD:6F:64:35:5B:06:FE:B6:11:57:39: 9D:C6:1D:FA:0D:2B:E0:5F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-09-20T12:16:33+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1381
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →