DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nominet.uk · 162.159.134.42:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=GB L=Oxford O=Nominet UK CN=*.nominet.uk
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2025-11-06T00:00:00+00:00
Expires
2026-12-07T23:59:59+00:00
Days remaining
77
Serial (hex)
0FC8BDF9473B2F3381E6F8518E1B2774
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.nominet.uk, DNS:nominet.uk

SHA-256 fingerprint

DF:86:DC:C0:74:00:E5:77:CD:53:1E:45:DD:C7:E2:8A:0D:85:3A:5A:39:15:09:E0:2A:1A:91:92:2B:9A:AF:02
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
E9:E8:62:B0:26:93:6D:2A:BE:42:BB:8B:78:4F:C5:96:A4:7F:59:32
subjectAltName
DNS:*.nominet.uk, DNS:nominet.uk
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 6 11:21:19.697 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:1B:87:D5:BA:33:6E:84:9A:C6:A5:D5:13: 8A:BA:59:3D:B3:39:26:6B:D2:98:0B:7F:44:6E:9B:DE: 07:B4:77:D9:02:20:5F:A7:F3:55:EE:2C:33:31:10:C7: EB:2F:3C:B7:67:6C:87:06:16:A1:08:BE:C8:1F:08:0D: 3A:D2:C7:19:DF:9E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 6 11:21:19.629 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:80:FE:53:37:BB:5F:34:96:D6:7B:2B: EC:C8:A9:26:D3:F5:C0:EE:83:2F:5D:D9:78:FF:C8:BA: 64:4B:D1:54:E7:02:21:00:F7:6C:F5:5D:4C:ED:0D:96: A0:EE:C8:D1:A9:10:DE:86:9C:51:D6:8C:38:A1:96:1E: 34:69:F5:F5:9B:1F:EC:55 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 6 11:21:19.646 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:50:64:34:D8:4D:5D:6B:2D:4B:27:9C:FF: F2:A3:4A:A9:F4:0E:50:24:01:07:E6:12:F7:68:FD:E6: 32:F3:96:A1:02:21:00:D1:3A:D4:98:42:BD:88:37:AE: 77:40:CB:2C:72:D9:90:C7:BA:27:1B:FC:EA:D1:94:64: CF:58:62:AF:04:D5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-21T06:33:18+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-09-24T00:00:00+00:00
Expires
2030-09-23T23:59:59+00:00
Days remaining
1463
Serial (hex)
085F94C02D857BE8CC14FF53EDA23E2A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1F:8E:B9:E9:A8:E0:66:CC:5B:38:33:E0:6B:31:29:76:4B:62:26:39:D5:B1:63:F6:00:E1:C7:91:20:BF:3E:ED
Certificate extensions & PEM
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
Valid from
2024-01-18T00:00:00+00:00
Expires
2031-11-09T23:59:59+00:00
Days remaining
1875
Serial (hex)
0FE032AB844D033106C50C8E13C8B068
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
authorityKeyIdentifier
03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →