DNSSSL certificate
TLSv1.3your-server.de · 85.10.215.232:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=*.your-server.de
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
- Valid from
- 2025-10-10T00:00:00+00:00
- Expires
- 2026-11-02T23:59:59+00:00
- Days remaining
- 43
- Serial (hex)
- 0B6BC13677DD1CF6101E67E2AEB58D11
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:*.your-server.de, DNS:your-server.de
SHA-256 fingerprint
BC:0E:59:62:BF:37:49:DA:D1:95:FA:3B:3F:38:7A:88:C8:47:05:4F:1B:13:84:0D:E5:4D:43:6A:4E:10:B4:D6
Certificate extensions & PEM
- authorityKeyIdentifier
- A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
- subjectKeyIdentifier
- A4:FC:6B:B6:AE:64:5C:B1:37:2A:32:D7:F9:8B:84:EB:FC:82:81:7C
- subjectAltName
- DNS:*.your-server.de, DNS:your-server.de
- certificatePolicies
- Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
- authorityInfoAccess
- OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Oct 10 07:29:10.650 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AB:19:EE:E9:11:3E:54:28:A7:43:32: EF:3D:F2:7A:58:CB:E3:F2:4A:4A:28:F2:A8:78:C6:68: 6E:83:37:F6:32:02:21:00:A6:D5:1A:11:AD:73:77:E7: 77:AB:CF:AB:1E:25:8D:76:55:78:76:11:AC:2E:84:64: 37:D2:AF:5E:F8:91:88:B4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 10 07:29:10.695 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:31:2C:F4:93:D1:66:22:B8:CC:4C:D1:3E: 55:46:E1:2E:72:2A:46:83:E3:24:72:04:A6:01:16:55: C9:83:7B:1E:02:21:00:DF:D1:C9:92:30:85:06:77:8B: B1:FD:05:1B:42:95:D7:57:42:53:56:46:57:4A:97:4C: 3B:F7:FF:F5:68:E8:A8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 10 07:29:10.717 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3C:0B:D1:F3:D1:47:69:E2:39:DC:F3:CD: C6:33:62:36:4E:4E:7A:2F:32:97:47:B8:18:D8:9C:18: 93:EC:72:9C:02:20:11:59:48:E8:B9:75:EF:B3:62:28: CC:FC:D5:45:DF:A6:79:58:AB:B4:0A:6B:FD:B3:E3:9B: F3:65:18:96:BE:58
-----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIQC2vBNnfdHPYQHmfirrWNETANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0yNTEwMTAwMDAwMDBaFw0yNjExMDIyMzU5NTlaMBsxGTAXBgNVBAMMECoueW91 ci1zZXJ2ZXIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCS82hJ yvb1TLVq3iQdqwIsFC/d5oBn/RDslTwaOhg+y+5ynQRe0BHljn5BcGrnybKrE41g cuZBr1kzaXBxHEMSonFSlYXF5mC53MmGy20JSrokTco5+unksizNrcxNzwPXu4zG SAHdJTa6RkemO3KIMoCJQoY1+ppsfN4KXzLDKEJL3z3rKNOap5kpuYb3UtW5wbsu 9n8AD5jn5rSuKX+7KoJNLYl9a0DX12pwMRTUwo3j3+FYz4SUHG0BOhWmlxeLzNne lVw9h6rlaB5Tqjcf/i6RyQCPxGTd0gdGMMqJNYScMgl1pAQwRF2LHjYvbTqbB8xg /Y8bi4YDXVW6S7wNi3PhjgkbxpOyM6P9w3mICrs39ArQWuE/2hJnwk2rqfQVAIx+ Q3jpbGDhdwrdXARTIeee9zCGC/7OmZE2JpzKGwmzWBlQm4kxhsq1kMFWnBsoPsWb 2a8bdrBgHSYGHx8c2fuCngkcclA1GDkDC+iWjqovd2XEIzxlRgFRhsXt1cSzfN/P HsPvcy/Wtrt+b6q8xjYX2A+LN4W3Z7mqaRqOm4YsFxbOAIJKl7zIhbquRwbbeToX H3YxL1TGZI2qqX3qXrjsKZSCK94ZxEb7hYRVutAv66S0GH91iogI0aXnN4gnQ8aR RfMyv2nchN92WEh27PQCSe0hWfOI4hF6p9lsfQIDAQABo4IDFTCCAxEwHwYDVR0j BBgwFoAUpYz+MszrDyzUGcYIuAAkiF3DxbcwHQYDVR0OBBYEFKT8a7auZFyxNyoy 1/mLhOv8goF8MCsGA1UdEQQkMCKCECoueW91ci1zZXJ2ZXIuZGWCDnlvdXItc2Vy dmVyLmRlMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAww CgYIKwYBBQUHAwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NkcC50aGF3dGUu Y29tL1RoYXd0ZVRMU1JTQUNBRzEuY3JsMHAGCCsGAQUFBwEBBGQwYjAkBggrBgEF BQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDoGCCsGAQUFBzAChi5odHRw Oi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVRMU1JTQUNBRzEuY3J0MAwGA1Ud EwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3ANdtfRDRp/V3wsfp X9cAv/mCyTNaZeHQswFzF8DIxWl3AAABmc0GD/oAAAQDAEgwRgIhAKsZ7ukRPlQo p0My7z3yeljL4/JKSijyqHjGaG6DN/YyAiEAptUaEa1zd+d3q8+rHiWNdlV4dhGs LoRkN9KvXviRiLQAdgDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1rXaa2Q5SzQAA AZnNBhAnAAAEAwBHMEUCIDEs9JPRZiK4zEzRPlVG4S5yKkaD4yRyBKYBFlXJg3se AiEA39HJkjCFBneLsf0FG0KV11dCU1ZGV0qXTDv3//Vo6KgAdQCUTkOH+uzB74Hz GSQmqBhlAcfTXzgCAT9yZ31VNy4Z2AAAAZnNBhA9AAAEAwBGMEQCIDwL0fPRR2ni OdzzzcYzYjZOTnovMpdHuBjYnBiT7HKcAiARWUjouXXvs2IozPzVRd+meVirtApr /bPjm/NlGJa+WDANBgkqhkiG9w0BAQsFAAOCAQEALyhuc+HkPvoq8YblM4lRj8wT C6vkaXPUmwCxC0Vnlb7U4X0bhhXh8B4YVrcgjOuFRSPo/FjwFAxAUfNHqSYF2f7Y sapzMWz9xSH2YKxuTkIZaVHyPlrazG5h03j655GecbYrcbzwSTFw6ObT9At3yAwP BFnjVkSfLo1HPJJmzbFomVQbnND1hmESuh2x2oFuSrnbuD4jSNWBAWKAzm9fsHDQ JPUzztqhdS8K8ulutiQwpDpT5Ci3oOLlkRj4mk4W6DOG7KjMu48Pdta7AUxjaIuS Lx2jv/XKWqqUpkeP9kJp1h3N4sU6AbOjct/NT3+ljNyov8hB4MjFed//qDElOg== -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-20T07:22:13+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Valid from
- 2017-11-02T12:24:25+00:00
- Expires
- 2027-11-02T12:24:25+00:00
- Days remaining
- 408
- Serial (hex)
- 090EE8C5DE5BFA62D2AE2FF7097C4857
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2
Certificate extensions & PEM
- subjectKeyIdentifier
- A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
- authorityKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
- certificatePolicies
- Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE----- MIIEizCCA3OgAwIBAgIQCQ7oxd5b+mLSri/3CXxIVzANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjI0MjVaFw0yNzExMDIxMjI0MjVaMF4xCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHTAbBgNVBAMTFFRoYXd0ZSBUTFMgUlNBIENBIEcxMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxjngmPhVetC0b/ozbYJdzOBUA1sMog47030cAP+P 23ANUN8grXECL8NhDEF4F1R9tL0wY0mczHaR0a7lYanlxtwWo1s2uGnnyDs6mOCs 66ew2w3YETr6Tb14xgjpu1gGFtAeewaikO9Fud8hxGJTSwn8xeNkfKVWpD2L4vFN 36FNgxeilK6aE4ykgGAzNlokTp6hNOLAYpDySdLAPKzuJSQ7JCEZ6O+SDKywIdXL oMTnpxuBKGSG88NWTo3CHCOGmQECia2yqdPDjgLqnEiYNjwQL8uMqj8rOvlMgviB cHA7xty+7/uYLN6ZS7Vq1/F/lVhVOf5ej6jZdmB85szFbQIDAQABo4IBQDCCATww HQYDVR0OBBYEFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB8GA1UdIwQYMBaAFE4iVCAY lebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQo MCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8E OzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxSb290RzIuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQC6 km0KA4sTb2VYpEBm/uL2HL/pZX9B7L/hbJ4NcoBe7V56oCnt7aeIo8sMjCRWTCWZ D1dY0+2KZOC1dKj8d1VXXAtnjytDDuPPf6/iow0mYQTO/GAg/MLyL6CDm3FzDB8V tsH/aeMgP6pgD1XQqz+haDnfnJTKBuxhcpnx3Adbleue/QnPf1hHYa8L+Rv8Pi5U h4V9FwHOfphdMXOxi14OqmsiTbc5cOs9/uukH+YVsuFdWTna6IVw1qh+tEtyH16R vmi7pkqyZYULOPMIE7avrljVVBZuikwARtY8tCVV6Pp9l3VeagBqb2ffgqNJt3C0 TYNYQI+BXG1R1cABlold -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.