THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

switch.ch · 130.59.31.80:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=CH jurisdictionST=Bern businessCategory=Private Organization serialNumber=CHE-101.494.993 C=CH L=Zürich O=SWITCH CN=www.switch.ch
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2025-10-28T00:00:00+00:00
Expires
2026-10-27T23:59:59+00:00
Days remaining
37
Serial (hex)
03FB12885A54892C94049FC6A1F308EB
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:www.switch.ch, DNS:switch.ch, DNS:misc.www.switch.ch, DNS:cms.www.switch.ch, DNS:swit.ch, DNS:www.swit.ch, DNS:help.switch.ch, DNS:prod.www.switch.ch

SHA-256 fingerprint

54:F4:10:9A:86:AE:CA:90:4A:08:4E:E2:36:46:FE:88:C6:D4:9A:00:BC:B9:E3:4B:35:FE:00:F6:53:11:7E:3D
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
15:1E:5F:7F:C2:5A:E0:7E:7F:7D:B4:83:CB:51:BA:92:5E:40:21:84
subjectAltName
DNS:www.switch.ch, DNS:switch.ch, DNS:misc.www.switch.ch, DNS:cms.www.switch.ch, DNS:swit.ch, DNS:www.swit.ch, DNS:help.switch.ch, DNS:prod.www.switch.ch
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Oct 28 09:14:46.508 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A4:3A:F8:D3:21:70:45:02:DA:11:62: 6D:D3:FD:BC:02:73:81:EA:FA:C7:4C:F2:D6:44:65:15: 6D:C3:59:93:60:02:21:00:8C:C8:8A:61:0B:E2:8B:31: 35:42:BC:78:DE:CE:B2:FF:9A:26:26:B9:BD:76:CA:B7: 38:3C:4F:1D:F5:D1:2F:CA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 28 09:14:46.571 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9E:44:11:9E:0B:C7:79:75:4C:9D:AF: D6:B0:60:F2:27:D9:D0:63:30:73:77:F2:9E:25:D8:0C: 51:99:56:5B:C9:02:20:69:31:2A:F1:FF:48:A5:36:4F: 23:8C:37:81:B6:73:AA:76:F7:86:36:0B:32:95:41:4E: EA:88:A1:32:7F:26:80 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 28 09:14:46.597 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:05:EB:2B:E0:D5:11:30:83:97:14:EC:7E: 25:48:0D:A2:92:55:6F:39:BA:6B:1B:F0:E5:BD:8C:06: 91:C9:76:7B:02:21:00:83:64:E6:34:20:E4:27:39:18: 26:6F:7D:55:63:E9:A9:E5:68:BC:CF:98:A5:4C:B2:60: 62:5B:E5:53:5B:58:A8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-09-20T05:45:42+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1381
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →