DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

pfcu.com · 104.16.176.2:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=US businessCategory=Private Organization serialNumber=7238 C=US ST=Pennsylvania L=Philadelphia O=Philadelphia Federal Credit Union CN=www.pfcu.com
Issuer
C=US O=DigiCert Inc CN=GeoTrust EV RSA CA G2
Valid from
2025-10-06T00:00:00+00:00
Expires
2026-10-27T23:59:59+00:00
Days remaining
15
Serial (hex)
0C012B564A9C5DFBBB976F92DC5F5988
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.pfcu.com, DNS:pfcu.com

SHA-256 fingerprint

43:73:76:CE:E3:66:AF:0D:E8:D5:66:C2:11:C8:28:17:6B:28:C6:40:EF:80:52:92:77:62:11:E4:47:63:8D:A7
Certificate extensions & PEM
authorityKeyIdentifier
28:D2:CF:EE:09:84:75:DD:B5:B2:B5:BF:3C:D5:A0:C6:73:88:5D:1F
subjectKeyIdentifier
80:26:E6:3C:1F:49:53:3E:72:DD:B5:D7:BB:DC:58:AE:0D:12:B6:40
subjectAltName
DNS:www.pfcu.com, DNS:pfcu.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/GeoTrustEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/GeoTrustEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Oct 6 12:42:21.978 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D9:E1:1B:20:DC:53:89:DD:3E:FF:CE: 24:B1:A4:6E:AA:1E:AC:E6:28:6E:1B:02:3D:13:D7:9E: 8E:25:1D:52:DA:02:21:00:A9:B9:91:F9:68:C1:2F:57: 35:6A:EA:7E:69:4F:16:9E:77:74:B5:23:3E:FD:47:98: 24:F6:DB:00:71:48:99:3F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 6 12:42:22.019 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2A:00:53:FB:EF:0A:90:5B:EB:07:DD:8C: BC:EB:E3:D5:98:E1:3F:B8:F4:56:E3:8D:F9:8E:26:02: 2E:5A:00:EA:02:21:00:D9:08:B4:40:B7:4B:0E:82:10: BB:E4:18:10:FA:FC:B1:09:5D:BC:3A:79:C8:66:A0:9B: D7:70:23:84:4E:D9:6B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 6 12:42:22.031 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:8E:CB:F0:B1:5F:C2:98:0A:99:DB:6C: 1E:F5:DA:90:CB:2B:7B:D0:73:BE:00:CA:DF:C8:D6:AD: CA:1C:EC:47:25:02:20:4F:32:A2:B0:48:74:9F:19:DA: 8D:12:46:6B:49:91:9F:EF:4E:28:4F:18:E7:C8:0C:ED: 96:FA:C3:CE:47:6A:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-12T23:47:47+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=GeoTrust EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:57+00:00
Expires
2030-07-02T12:42:57+00:00
Days remaining
1358
Serial (hex)
0D601262C8A7721A6EAB0361E5619580
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2D:14:0F:20:B8:A9:6E:2B:4D:2F:1C:C5:AC:A5:E5:A1:E7:DC:56:A7:49:1E:51:09:06:96:0F:38:D2:D2:1A:EF
Certificate extensions & PEM
subjectKeyIdentifier
28:D2:CF:EE:09:84:75:DD:B5:B2:B5:BF:3C:D5:A0:C6:73:88:5D:1F
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →