DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

posteo.de · 185.67.36.168:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=DE jurisdictionST=Berlin jurisdictionL=Charlottenburg businessCategory=Private Organization serialNumber=HRA 47592 C=DE ST=Berlin L=Berlin O=Posteo e.K. CN=posteo.de
Issuer
C=US O=DigiCert Inc CN=GeoTrust EV RSA CA G2
Valid from
2026-02-18T00:00:00+00:00
Expires
2027-02-24T23:59:59+00:00
Days remaining
102
Serial (hex)
0C57EE5D71289AD1D02D6675CA54C209
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

DNS:posteo.de, DNS:www.posteo.de, DNS:lists.posteo.de, DNS:mta-sts.posteo.de, DNS:api.posteo.de, DNS:cdn.posteo.de, DNS:autoconfig.posteo.de

SHA-256 fingerprint

67:6F:C4:53:CB:39:04:7C:37:1C:AB:C1:13:79:AA:24:20:33:E3:C6:BD:A5:36:8C:E2:73:74:FE:DF:E4:6E:2F
Certificate extensions & PEM
authorityKeyIdentifier
28:D2:CF:EE:09:84:75:DD:B5:B2:B5:BF:3C:D5:A0:C6:73:88:5D:1F
subjectKeyIdentifier
70:65:3D:88:EF:70:90:F1:B9:18:F0:43:B9:75:4F:8F:AC:E8:CF:06
subjectAltName
DNS:posteo.de, DNS:www.posteo.de, DNS:lists.posteo.de, DNS:mta-sts.posteo.de, DNS:api.posteo.de, DNS:cdn.posteo.de, DNS:autoconfig.posteo.de
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/GeoTrustEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/GeoTrustEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 18 16:05:47.024 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:88:B8:1D:7F:C0:39:6F:6B:C0:96:FC: 7F:04:AB:10:F1:32:27:03:AE:FC:2C:B1:E4:23:D7:9C: 36:85:FC:C6:5F:02:21:00:B8:99:3B:4C:11:9B:52:98: A0:89:31:8D:82:16:6B:D4:7F:2C:2E:C4:B8:05:4B:BF: 16:96:B1:DE:38:67:EE:26 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Feb 18 16:05:47.039 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:D8:09:8E:28:D3:59:0A:3F:DE:1E:C3: 9F:FA:F1:35:F8:B1:B7:96:DF:8B:DE:BA:5B:FB:AA:E7: E2:5C:90:2C:02:21:00:90:C3:CA:91:C3:54:E0:63:99: 95:EF:F1:59:DC:F4:33:90:E9:B5:22:55:EF:66:0B:13: 1E:FB:13:CD:BB:E6:64 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Feb 18 16:05:47.221 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F2:82:B8:16:67:6D:35:04:CB:4D:A5: FB:59:7A:6E:E0:D5:23:F6:F7:E8:A0:A2:1B:E2:2C:39: A9:A4:0C:6B:9F:02:21:00:BD:5C:5B:C3:2A:47:3D:29: 7F:58:24:91:C7:1B:06:74:76:26:72:FE:7E:7F:4A:C4: 38:98:73:63:52:71:BD:11
-----BEGIN CERTIFICATE-----
MIIH3DCCBsSgAwIBAgIQDFfuXXEomtHQLWZ1ylTCCTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVH
ZW9UcnVzdCBFViBSU0EgQ0EgRzIwHhcNMjYwMjE4MDAwMDAwWhcNMjcwMjI0MjM1
OTU5WjCB2zETMBEGCysGAQQBgjc8AgEDEwJERTEXMBUGCysGAQQBgjc8AgECEwZC
ZXJsaW4xHzAdBgsrBgEEAYI3PAIBARMOQ2hhcmxvdHRlbmJ1cmcxHTAbBgNVBA8M
FFByaXZhdGUgT3JnYW5pemF0aW9uMRIwEAYDVQQFEwlIUkEgNDc1OTIxCzAJBgNV
BAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4xDzANBgNVBAcTBkJlcmxpbjEUMBIGA1UE
ChMLUG9zdGVvIGUuSy4xEjAQBgNVBAMTCXBvc3Rlby5kZTCCAaIwDQYJKoZIhvcN
AQEBBQADggGPADCCAYoCggGBAOkFsKb4wYVfZeC7BPrdg26aZvcZFtO/pvWEjJTH
sPKzdGzEDTpzJ2zapUqWS11Lpr2K/2eJpcTAY8Ck0OhLuWmImlAQOBrG2PR+GnDq
CQpOAwrpa/Wqfgqvehxc0+ew+foIh4kPEPlDlekTSMH5nok8dwARCO+BVHsds6ZI
N7YABnnruamCZMTY8AraNY9RQaCX0aj2qCf8OZMMH3hRCHjcdDo/8RtBak5UHHxx
vY0YbUUpazQ/TzwJY6OHX3uv4TXnirYLLJmAHPTsmLwvxNSSB0IOXW+HeeJebenO
4W1cL8mWHQJrW+mlJWfJWokP0PhuvumwpuvVfgwr1lczz6AI/2mP3R7wIuRVpliW
f+lPgRp+8BSMGQr65Rjx6WRp4iI1KILLB6josSxDboULad42cvFDcwGDt5NFa2E5
ouIrjqrF5/VG2HUNJpbx7xubR2aGigGwHg3k5aSe52DevKQlR4KOTvbWisykEbHv
EaKXMgM1KeYXcgHbohpYhn/3WQIDAQABo4IDsDCCA6wwHwYDVR0jBBgwFoAUKNLP
7gmEdd21srW/PNWgxnOIXR8wHQYDVR0OBBYEFHBlPYjvcJDxuRjwQ7l1T4+s6M8G
MHsGA1UdEQR0MHKCCXBvc3Rlby5kZYINd3d3LnBvc3Rlby5kZYIPbGlzdHMucG9z
dGVvLmRlghFtdGEtc3RzLnBvc3Rlby5kZYINYXBpLnBvc3Rlby5kZYINY2RuLnBv
c3Rlby5kZYIUYXV0b2NvbmZpZy5wb3N0ZW8uZGUwSgYDVR0gBEMwQTALBglghkgB
hv1sAgEwMgYFZ4EMAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATB1
BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1
c3RFVlJTQUNBRzIuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
R2VvVHJ1c3RFVlJTQUNBRzIuY3JsMHMGCCsGAQUFBwEBBGcwZTAkBggrBgEFBQcw
AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMD0GCCsGAQUFBzAChjFodHRwOi8v
Y2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RFVlJTQUNBRzIuY3J0MAwGA1Ud
EwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AExj3JjlnB2riPYe
ij3ero+rRKM3e1+blMP7oZz8wb4mAAABnHGAG5AAAAQDAEgwRgIhAIi4HX/AOW9r
wJb8fwSrEPEyJwOu/Cyx5CPXnDaF/MZfAiEAuJk7TBGbUpigiTGNghZr1H8sLsS4
BUu/Fpax3jhn7iYAdgAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9ZnwAA
AZxxgBufAAAEAwBHMEUCIDLYCY4o01kKP94ew5/68TX4sbeW34veulv7qufiXJAs
AiEAkMPKkcNU4GOZle/xWdz0M5DptSJV72YLEx77E8275mQAdwBgTJqven93XwHU
BvySDciZ6wscffjJUhv6+hd3O5eLyQAAAZxxgBxVAAAEAwBIMEYCIQDygrgWZ201
BMtNpftZem7g1SP29+igohviLDmppAxrnwIhAL1cW8MqRz0pf1gkkccbBnR2JnL+
fn9KxDiYc2NScb0RMA0GCSqGSIb3DQEBDAUAA4IBAQCFW/fmXlioG9ecc83lM3Lr
Mm2OIoMgP6MN2QrbhvKPmDKu17waLPCBeQgOxGZuFr9io6wpIGmhI8U8Z+/VKMMD
pwI9ljxaO/SHegHdmNmNtYofdvs6TM0XpboQGXGNa2TXrqGqG6HTZ6iF+OwDh4d9
BkNMnwd+8Lpvr1k0Q/x8T31c2lGj5KTbrFNFRSyaxh+7XS8xCwV8ITtYgVbJY2+4
3lm8oPn0281uvE7vjUN29Ki77PJuq9JE35TVDnBI8jitYc2oY0vIJzFZPSDu8VKQ
lIhg4nobLf3NcZ6KvgI9oaZDZfyhCf6UJPdI8iPWLXzw9yEkZk8blxaoYjvrPhnK
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-14T02:07:24+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=GeoTrust EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:57+00:00
Expires
2030-07-02T12:42:57+00:00
Days remaining
1326
Serial (hex)
0D601262C8A7721A6EAB0361E5619580
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2D:14:0F:20:B8:A9:6E:2B:4D:2F:1C:C5:AC:A5:E5:A1:E7:DC:56:A7:49:1E:51:09:06:96:0F:38:D2:D2:1A:EF
Certificate extensions & PEM
subjectKeyIdentifier
28:D2:CF:EE:09:84:75:DD:B5:B2:B5:BF:3C:D5:A0:C6:73:88:5D:1F
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →