DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

gs.com · 23.2.219.6:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=US jurisdictionST=New York businessCategory=Private Organization serialNumber=1560743 C=US ST=New York L=New York O=Goldman Sachs & Co. LLC CN=cdn-ak-1.gs.com
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-07-08T00:00:00+00:00
Expires
2027-01-22T23:59:59+00:00
Days remaining
95
Serial (hex)
07BC6EB50D0A7EB86B095350C8E71BD5
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:cdn-ak-1.gs.com, DNS:brandgovernance.gs.com, DNS:cdn.gs.com, DNS:clicks.newsletter.mail.gs.com, DNS:design.gs.com, DNS:goldmansachs.com, DNS:gs.com, DNS:gsec.gs.com, DNS:i.gs.com, DNS:link.gs.com, DNS:socialcontent.gs.com, DNS:video.goldmansachs.com, DNS:warrants.gs.com, DNS:www.10000-women.com, DNS:www.10000-women.org, DNS:www.10000smallbusinesses.com, DNS:www.10000smallbusinesses.org, DNS:www.10000women.org, DNS:www.10k-women.com, DNS:www.10k-women.org, DNS:www.10kwomen.com, DNS:www.10kwomen.org, DNS:www.30hudson.com, DNS:www.crmpolicygroup.org, DNS:www.goldmansachs.be, DNS:www.goldmansachs.ch, DNS:www.goldmansachs.co.jp, DNS:www.goldmansachs.com, DNS:www.goldmansachs.com.br, DNS:www.goldmansachs.nl, DNS:www.goldmansachs10000smallbusinesses.com, DNS:www.goldmansachs10000smallbusinesses.org, DNS:www.goldmansachssaudiarabia.com, DNS:www.gs.com, DNS:www.gs10000smallbusinesses.com, DNS:www.gs10000smallbusinesses.org, DNS:www.gsprimebroker.com, DNS:www2.goldmansachs.com, DNS:www2.gs.com

SHA-256 fingerprint

DD:42:11:76:C4:E9:0A:7A:AA:BE:E9:79:A7:1C:40:07:43:FF:19:27:5F:FE:19:CC:21:F8:A2:29:E1:65:06:2A
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
66:BD:C9:9D:DF:75:84:13:99:9B:0C:F0:64:E2:D9:8A:62:8D:A0:43
subjectAltName
DNS:cdn-ak-1.gs.com, DNS:brandgovernance.gs.com, DNS:cdn.gs.com, DNS:clicks.newsletter.mail.gs.com, DNS:design.gs.com, DNS:goldmansachs.com, DNS:gs.com, DNS:gsec.gs.com, DNS:i.gs.com, DNS:link.gs.com, DNS:socialcontent.gs.com, DNS:video.goldmansachs.com, DNS:warrants.gs.com, DNS:www.10000-women.com, DNS:www.10000-women.org, DNS:www.10000smallbusinesses.com, DNS:www.10000smallbusinesses.org, DNS:www.10000women.org, DNS:www.10k-women.com, DNS:www.10k-women.org, DNS:www.10kwomen.com, DNS:www.10kwomen.org, DNS:www.30hudson.com, DNS:www.crmpolicygroup.org, DNS:www.goldmansachs.be, DNS:www.goldmansachs.ch, DNS:www.goldmansachs.co.jp, DNS:www.goldmansachs.com, DNS:www.goldmansachs.com.br, DNS:www.goldmansachs.nl, DNS:www.goldmansachs10000smallbusinesses.com, DNS:www.goldmansachs10000smallbusinesses.org, DNS:www.goldmansachssaudiarabia.com, DNS:www.gs.com, DNS:www.gs10000smallbusinesses.com, DNS:www.gs10000smallbusinesses.org, DNS:www.gsprimebroker.com, DNS:www2.goldmansachs.com, DNS:www2.gs.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jul 8 18:13:57.662 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:11:33:CE:84:60:9D:7B:DC:CB:09:3E:A8: 0B:3B:C4:D1:BE:48:3E:07:62:E7:BC:32:E6:F7:5C:58: 70:FC:9C:AF:02:20:36:20:E7:24:29:D3:A3:E5:16:FF: B6:9C:3B:4C:D2:39:37:43:31:B8:59:76:0A:94:95:C6: 05:10:A0:16:A0:5D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Jul 8 18:13:57.816 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F7:65:A0:F7:3D:2C:44:EE:BD:B9:BC: FF:6A:DB:52:C7:FE:D0:62:44:2C:34:D5:62:44:CC:3A: 0F:DD:17:3C:55:02:21:00:DB:72:81:A0:D2:0E:F0:A4: 1E:B8:47:18:EE:49:E7:09:84:98:A6:19:E1:C1:3F:CC: 77:E7:1F:43:08:0B:7E:F0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 8 18:13:57.783 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D0:F4:99:6A:F6:DD:DA:25:F6:3C:CB: 10:56:2C:F5:63:69:81:E4:10:E0:88:59:63:91:0A:93: 1D:16:A6:06:E5:02:20:78:BD:7B:6E:71:E3:2F:99:5F: 0A:3D:A9:85:7B:0A:59:BE:FA:07:7A:0C:5D:46:E9:0D: 8B:43:94:CA:91:E9:C6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-19T18:16:08+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1637
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →