DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

baesystems.com · 45.60.121.7:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=heritage.baesystems.com
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3
Valid from
2026-09-23T11:58:21+00:00
Expires
2026-12-22T11:58:21+00:00
Days remaining
60
Serial (hex)
01E6186DC4B921C06940DB4B112DA107
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:heritage.baesystems.com, DNS:annualreport.baesystems.com, DNS:careers.baesystems.com, DNS:workexperience.baesystems.com, DNS:www.baesystems.com, DNS:pensions.baesystems.com, DNS:investors.baesystems.com, DNS:baesystems.com

SHA-256 fingerprint

A6:23:15:4B:01:71:8B:3B:A5:18:52:94:82:60:48:1B:0B:3C:BA:AE:C6:A2:97:DB:E3:45:48:2E:55:64:FF:39
Certificate extensions & PEM
subjectAltName
DNS:heritage.baesystems.com, DNS:annualreport.baesystems.com, DNS:careers.baesystems.com, DNS:workexperience.baesystems.com, DNS:www.baesystems.com, DNS:pensions.baesystems.com, DNS:investors.baesystems.com, DNS:baesystems.com
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
subjectKeyIdentifier
47:05:DA:C3:29:91:D3:AC:E8:53:89:A3:9C:78:FD:AA:09:7E:27:84
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
basicConstraints
CA:FALSE
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/ca/gsatlasr46dvtlsca2026q3 CA Issuers - URI:http://secure.globalsign.com/cacert/gsatlasr46dvtlsca2026q3.crt
authorityKeyIdentifier
DC:52:7D:D4:10:17:BE:E5:FB:01:44:B0:FB:19:CA:C7:EE:D0:28:EB
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/ca/gsatlasr46dvtlsca2026q3.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 23 11:58:24.081 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E9:44:76:07:15:BA:F0:2E:1D:A7:3C: DF:20:8C:3F:B7:5E:15:49:B9:49:BC:4E:67:E2:6B:5D: 25:9A:D5:81:D1:02:20:38:60:FF:CD:FC:85:16:9A:1F: C9:7B:77:66:A8:20:B0:2A:10:A2:8C:3D:DE:0E:25:23: C0:E2:11:6C:45:86:90 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Sep 23 11:58:24.392 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5F:F4:7F:2B:7D:1E:06:2F:33:51:51:DD: 77:4E:86:E3:32:CB:69:9E:5C:8A:1F:17:F9:95:DB:8F: 46:AF:B0:3E:02:21:00:B9:7F:AE:2D:72:E6:C3:D3:A8: 31:7C:E7:3B:37:BC:80:9A:F8:D2:79:47:46:A6:2D:8B: D8:08:AB:82:A2:C3:1A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-22T22:46:30+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Valid from
2026-04-22T03:00:05+00:00
Expires
2028-04-22T00:00:00+00:00
Days remaining
547
Serial (hex)
85AC708351E68DF704248BFDF17E4272
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

99:AE:C9:2E:EA:8F:B5:36:F7:4D:FB:FB:82:44:E4:C8:F5:AC:3B:65:8F:7A:98:86:19:79:7A:4D:04:AC:10:36
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
DC:52:7D:D4:10:17:BE:E5:FB:01:44:B0:FB:19:CA:C7:EE:D0:28:EB
authorityKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr46 CA Issuers - URI:http://secure.globalsign.com/cacert/rootr46.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/rootr46.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2019-11-20T00:00:00+00:00
Expires
2029-03-18T00:00:00+00:00
Days remaining
877
Serial (hex)
75A8BAD878F8AF305F72DD1C1140DF3A
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A6:3C:13:98:B5:F8:DD:2D:43:2F:BE:4C:2C:19:14:2B:EA:6D:5D:02:21:FA:E7:94:71:8A:E7:59:7A:CC:A9:6D
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIQdai62Hj4rzBfct0cEUDfOjANBgkqhkiG9w0BAQwFADBM
MSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xv
YmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xOTExMjAwMDAwMDBaFw0y
OTAzMTgwMDAwMDBaMEYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWdu
IG52LXNhMRwwGgYDVQQDExNHbG9iYWxTaWduIFJvb3QgUjQ2MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEArKx0MuizZeW67UMmHaaJDUW6KYiypB1j3dPB
LAlXiTmhVelnNHcMbuRVHVIl0hNrXuEdqbd9iTJfDZ6fLHpjYEAfprC2eI+ZVJYI
WK7kBrxiBQIWv6+oIwO2lA+8bmzCy9Wmuwzp9sEC+yHeZt0Xq3RC7/B0LyX06mtV
W5Dbnd9ehwpA+60Za/v3ymCI3trBj9au1X/UPIPu1xZMg0UzayfQhtAcLWvzq33x
han1KNKt7/OESxyH/BOjOnKiWhEr1idxJ+2BLW1mgZKHtBtYesw/CvpGT014XPgr
SOMEhMtd9rRqs2X8Qp5RJiMgyz0U+YHtZRYATxpkl2YIz4x74yvAnfkU8hvxVmoW
vyyFhc14OJrrQmoCNBiDF06UVvi2grXzlt09875/IHc+exkjayzUcnNDV33g+Ndp
Txc2BPnAkGA3Rd7mDNh0ja6com10XUK+BvXZZG4CEKyJsEw7B01AfiTFipiCeY6k
p4IgjSP6J3HJ38ZBdKBN9pEW3EaMXyljMVlxDNhvwrYyffvmXVOmfhX8u3V8Xez4
9hcc7MdrGcvze/ArB6XZbHlUdmydHKZuDul5DKgjaqPfGzAxn7FUe/5qy2aq3GXQ
op5Kmgcha4GP28RZ+t4iwASc46pbNpPoPb16oZ0LdrELx539z5ioBsL4KqOhg6C3
JXKlAuMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTAD
AQH/MB0GA1UdDgQWBBQDXKtzgYeozLCm1ZTiNpZJ/wWZLDAfBgNVHSMEGDAWgBSP
8Et/qC5FJK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGG
Imh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAr
oCmgJ4YlaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNV
HSAEQDA+MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFs
c2lnbi5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQEMBQADggEBAGBD9cJLVP2v
gPSlomstHU38guKTe4ELEFOnM9OnuzK2HlzmgVSPdf4Go7r8FZt4+d8lVs7JPt2z
THYK/cA1f/DYT56clWZO972GbvjOwmHop4LqAe902mRBxEo966EFsaBqwk8zzexW
nPZ29CXHc3doU0wXhIPzch5d18Mp4y1RRjybOODc89QJSBataMU9rIHNTF6rePxw
gL4/k/zrGiCRCRJ+iblTL/WIhm0ENfNJMTxlbMHxPYH4aiHarVBXpXPkiZ/85knD
XNcnTUTZKEtY6xJExiC+5IHDjdnWz/V2d8MkQx+o7TPbwgF/SVcYcp0GPJG6RkLD
rkNz7Wn9gck=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →