DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

fastly.com · 151.101.65.57:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.fastly.com
Issuer
C=US O=Certainly CN=Certainly Intermediate R1
Valid from
2026-10-24T16:48:18+00:00
Expires
2026-11-23T16:48:17+00:00
Days remaining
15
Serial (hex)
78F935A7B2CF05EA354228B5318077BF9A13
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:developer.fastly.com, DNS:fastly.com, DNS:www.fastly.com

SHA-256 fingerprint

20:17:1D:B4:62:DF:2F:F3:15:02:3C:92:2E:EA:A8:65:C0:A9:17:13:53:E9:52:05:50:21:3C:0F:B4:D8:62:2C
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
71:59:A5:B1:A0:34:E3:69:BE:59:F0:4B:19:64:F9:8A:4C:DD:AC:85
authorityKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityInfoAccess
CA Issuers - URI:http://int-r1.certainly.com
subjectAltName
DNS:developer.fastly.com, DNS:fastly.com, DNS:www.fastly.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crls.certainly.com/17182262453002514/4.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Oct 24 17:46:48.910 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DF:BB:B4:BA:DB:51:EE:EE:76:C6:56: A0:29:38:24:FA:1E:C7:BD:03:15:BD:D5:05:8E:2B:21: D3:B2:D0:C0:0D:02:20:7F:5B:8A:47:D6:1C:BF:21:D1: DC:AB:57:23:17:86:82:62:06:8A:1A:B8:FB:A7:65:E5: 48:CF:D8:DC:9F:E8:60 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Oct 24 17:46:49.091 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1A:B4:AD:E3:AA:E3:F4:21:E6:35:51:1A: 6D:1E:99:C6:26:F7:A5:C6:15:43:BC:6C:9B:FF:64:18: 61:90:F5:0C:02:21:00:DB:00:1A:9B:73:A6:80:F4:98: BE:B0:B8:B4:8B:3E:66:34:01:A9:FF:9F:F6:25:C1:B0: 95:29:02:81:46:5D:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-07T18:09:12+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Certainly CN=Certainly Intermediate R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2022-06-22T00:00:00+00:00
Expires
2032-06-21T23:59:59+00:00
Days remaining
2053
Serial (hex)
11831CDE4CB573E5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FE:C4:1E:32:CA:75:C2:95:A6:24:0F:A6:39:D3:AB:E3:BF:B5:CB:13:1D:66:90:E2:33:1A:17:6B:ED:2E:5B:D2
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt.cer
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.49945.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →