DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

semrush.com · 34.120.45.191:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.semrush.com
Issuer
C=US O=Google Trust Services CN=WR3
Valid from
2026-09-14T23:13:57+00:00
Expires
2026-12-14T00:09:52+00:00
Days remaining
40
Serial (hex)
3578756EAA694E2B10DA6CFD45B328C9
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.semrush.com, DNS:semrush.com

SHA-256 fingerprint

EB:18:A4:05:98:95:F4:59:5D:54:B4:32:F0:43:54:2A:02:08:49:2C:43:48:0B:3F:DE:29:80:9F:C7:77:93:BD
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
69:64:23:2E:6D:D0:B3:A2:80:17:95:E3:B6:F8:47:EE:90:C3:30:D8
authorityKeyIdentifier
C7:81:F5:FD:8E:88:D9:00:3C:4D:63:A2:50:31:24:A0:CE:23:FE:23
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/wr3.crt
subjectAltName
DNS:*.semrush.com, DNS:semrush.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://c.pki.goog/wr3/_tX5ASFloZY.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Sep 15 00:13:57.620 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AA:A5:9A:19:43:5A:90:74:2F:C6:83: 20:C4:8A:A5:77:A0:C7:9D:4F:20:B4:E2:F6:9E:33:71: 60:38:ED:9B:B3:02:21:00:D4:C4:B2:05:AF:1E:CB:F2: 07:0C:D2:F0:C3:90:BE:60:45:04:5B:09:B6:96:47:6C: 1C:E2:D4:2B:19:78:F1:EB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 15 00:13:58.590 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:15:38:DF:F6:E2:59:B6:B8:05:D2:95:D2: 25:C4:C3:FE:40:33:0D:C5:BF:F0:90:1B:25:C8:89:56: D3:03:53:19:02:20:6E:BA:20:08:4D:E4:19:9D:D6:42: 5D:C5:05:6A:2B:48:C0:F4:86:29:A2:43:DC:CD:4A:7C: 91:88:2A:A7:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-03T21:40:46+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Google Trust Services CN=WR3
Issuer
C=US O=Google Trust Services LLC CN=GTS Root R1
Valid from
2023-12-13T09:00:00+00:00
Expires
2029-02-20T14:00:00+00:00
Days remaining
839
Serial (hex)
7FF005A91568D63ABC22861684AA4B5A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2F:E3:57:DB:13:75:1F:F9:16:0E:87:35:49:75:B3:40:74:98:F4:1C:9B:D1:6A:48:65:78:66:E6:E5:A9:B4:C7
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C7:81:F5:FD:8E:88:D9:00:3C:4D:63:A2:50:31:24:A0:CE:23:FE:23
authorityKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/r1.crt
crlDistributionPoints
Full Name: URI:http://c.pki.goog/r/r1.crl
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Google Trust Services LLC CN=GTS Root R1
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2020-06-19T00:00:42+00:00
Expires
2028-01-28T00:00:42+00:00
Days remaining
450
Serial (hex)
77BD0D6CDB36F91AEA210FC4F058D30D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

3E:E0:27:8D:F7:1F:A3:C1:25:C4:CD:48:7F:01:D7:74:69:4E:6F:C5:7E:0C:D9:4C:24:EF:D7:69:13:39:18:E5
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.pki.goog/gsr1 CA Issuers - URI:http://pki.goog/gsr1/gsr1.crt
crlDistributionPoints
Full Name: URI:http://crl.pki.goog/gsr1/gsr1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.11129.2.5.3.2 Policy: 1.3.6.1.4.1.11129.2.5.3.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →