DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

tui.com · 104.126.37.144:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE L=Hannover O=TUI AG CN=www.tui.com
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS ECC CA G1
Valid from
2026-02-11T00:00:00+00:00
Expires
2027-02-10T23:59:59+00:00
Days remaining
110
Serial (hex)
0F6B580209AA4DD878D90287B3926ECB
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:www.tui.com, DNS:tui.com

SHA-256 fingerprint

17:6D:39:3B:D0:83:79:93:5B:D6:9B:20:64:6C:9B:25:D4:8D:6F:6D:CD:60:93:9F:18:91:AB:DB:5D:01:51:80
Certificate extensions & PEM
authorityKeyIdentifier
26:34:51:EA:29:9D:88:A2:7F:DB:58:11:3D:CA:1B:1E:2A:9C:B4:E1
subjectKeyIdentifier
C8:7F:6E:A8:CE:00:BC:8B:0E:B9:A1:3E:F2:8C:0E:4F:28:59:8A:11
subjectAltName
DNS:www.tui.com, DNS:tui.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.thawte.com/ThawteTLSECCCAG1.crl
authorityInfoAccess
OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSECCCAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 11 10:31:23.685 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CF:54:9D:F3:E3:E6:B3:52:79:01:90: 3B:5D:D4:3B:9B:AF:DE:0C:2C:58:45:D0:D2:0C:A0:CD: 29:BA:50:0F:DE:02:20:46:82:10:13:04:F7:BC:97:C1: 77:D6:19:9A:27:08:0C:05:0E:2C:57:E9:18:2F:00:E0: 45:25:C0:DD:5C:39:AA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Feb 11 10:31:23.686 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:7A:B3:DA:AB:8F:FB:4B:30:28:D8:14:39: 50:73:3E:09:9C:EB:45:70:B0:45:52:53:F7:9E:D9:25: 15:58:B7:4C:02:21:00:D3:BA:99:E2:87:F6:CC:18:6E: D2:A1:8D:95:B7:A7:48:55:9C:C6:43:31:BA:79:37:FA: 9C:1E:BD:9D:B0:B3:5F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Feb 11 10:31:23.773 2026 GMT Extensions: 00:00:05:00:02:99:3C:01 Signature : ecdsa-with-SHA256 30:46:02:21:00:80:A4:7B:2D:84:F5:28:16:42:05:71: F5:96:58:2A:68:D9:2F:A7:CB:4E:88:A8:71:13:8E:EF: 9B:42:BC:3E:5A:02:21:00:F0:B1:B3:4E:B2:7A:76:0E: 31:40:9E:A0:09:71:79:F1:F1:BA:15:FB:30:D6:9B:5D: 15:3E:39:CB:5A:7D:CC:CC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-23T03:33:58+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS ECC CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2017-11-02T12:59:51+00:00
Expires
2027-11-02T12:59:51+00:00
Days remaining
375
Serial (hex)
044C95221A9F6620D6C804DB2E284839
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

AE:82:20:1F:56:5E:04:39:B7:F4:AD:68:93:27:59:4E:B9:74:A4:F7:81:B1:A6:CB:FE:D5:9B:D3:82:31:7F:13
Certificate extensions & PEM
subjectKeyIdentifier
26:34:51:EA:29:9D:88:A2:7F:DB:58:11:3D:CA:1B:1E:2A:9C:B4:E1
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4102
Serial (hex)
055556BCF25EA43535C3A40FD5AB4572
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
-----BEGIN CERTIFICATE-----
MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe
Fw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVTMRUw
EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x
IDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0CAQYF
K4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FG
fp4tn+6OYwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPO
Z9wj/wMco+I+o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAd
BgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNpYim8S8YwCgYIKoZIzj0EAwMDaAAwZQIx
AK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y3maTD/HMsQmP3Wyr+mt/
oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8
sycX
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →