DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail1.nsp-cloud.de · 49.13.22.31:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.nsp-cloud.de
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
Valid from
2026-08-04T00:00:00+00:00
Expires
2027-02-18T23:59:59+00:00
Days remaining
109
Serial (hex)
02D9752A3AC0377C6C32980A3A671FF2
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

DNS:*.nsp-cloud.de, DNS:nsp-cloud.de

SHA-256 fingerprint

5A:23:80:0C:2F:62:EE:6D:1F:BC:18:D2:EF:01:F9:BB:37:23:AD:0F:30:4F:0B:05:8C:37:38:45:07:13:AA:A1
Certificate extensions & PEM
authorityKeyIdentifier
A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
subjectKeyIdentifier
98:94:88:B0:D2:50:C6:7E:C7:B1:55:F6:FF:0B:01:FB:AB:9F:C3:E1
subjectAltName
DNS:*.nsp-cloud.de, DNS:nsp-cloud.de
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 4 08:30:12.066 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:79:01:82:4C:D1:E5:3D:60:68:B9:C0:A5: F2:26:0F:96:72:13:B3:49:8F:5B:1E:2F:AE:ED:76:B0: F4:46:8D:85:02:20:3F:BD:58:80:52:93:E8:20:80:6D: E4:E3:CF:58:90:B4:09:41:5D:AA:08:6E:11:9B:96:8B: B2:D2:77:61:D6:35 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 4 08:30:12.057 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:B2:26:7B:2D:19:81:88:5E:BE:12:16: 92:C3:94:3F:F0:58:CB:A6:71:B9:2A:36:8E:83:E4:E4: 77:6D:C3:3F:05:02:20:57:EB:DF:EF:5F:3D:87:42:D5: B2:10:0E:AB:61:CF:9C:D1:A1:E5:D1:22:4D:E1:23:9A: B3:2D:0E:39:ED:6F:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 4 08:30:12.151 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:23:14:75:12:36:AD:5C:48:19:36: 4D:31:7F:D6:78:BC:79:05:8F:69:A4:AC:D5:38:B6:50: 72:58:72:10:21:02:20:10:2C:8B:D6:8F:75:3C:27:10: D9:44:DD:09:BA:06:8F:BC:B8:B6:74:F8:BB:2A:BB:29: 0D:89:FF:C8:0A:C5:CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-01T10:54:57+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:24:25+00:00
Expires
2027-11-02T12:24:25+00:00
Days remaining
366
Serial (hex)
090EE8C5DE5BFA62D2AE2FF7097C4857
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2
Certificate extensions & PEM
subjectKeyIdentifier
A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →