DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

aholddelhaize.com · 150.171.109.37:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CH ST=Genève O=Ahold Delhaize Licensing Sàrl CN=aholddelhaize.com
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2025-11-28T00:00:00+00:00
Expires
2026-11-28T23:59:59+00:00
Days remaining
52
Serial (hex)
A6DC11B224F6637B2BA5108110DB1784
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:aholddelhaize.com, DNS:cda.aholddelhaize.com, DNS:cms.aholddelhaize.com, DNS:media.aholddelhaize.com, DNS:nieuw.aholddelhaize.com, DNS:preview.aholddelhaize.com, DNS:www.aholddelhaize.com

SHA-256 fingerprint

57:81:C4:3A:33:D1:0E:3F:4C:59:0C:DA:2F:1F:E7:B6:5B:59:8F:E2:7E:00:EB:13:4E:DB:86:48:7C:15:BA:71
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
94:20:59:61:72:E8:89:CB:4D:5A:32:D7:A5:FE:8C:9B:28:FE:80:81
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 28 12:43:32.869 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C7:66:7D:14:9C:57:8D:99:01:3E:5D: A6:E8:97:9A:66:35:B0:94:85:E3:84:87:08:8E:11:A9: 17:C7:A3:95:08:02:21:00:DB:EF:30:9C:3E:73:8B:7A: 40:1C:7B:4D:E0:5C:12:C3:F4:41:E6:49:8D:FA:CE:15: D1:11:66:41:C2:E6:C5:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 28 12:43:33.056 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6B:74:DF:D1:0A:6A:67:46:92:D6:21:B2: E1:34:9C:B1:C6:DF:3D:9B:48:FB:72:09:DC:DA:6E:F9: 86:6A:0F:BC:02:21:00:A7:D3:79:3F:90:7A:27:0A:BE: 88:2C:46:A4:02:97:9C:57:08:DB:7A:53:3E:6B:E6:88: B1:60:8B:44:5D:D5:B6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 28 12:43:32.861 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E5:3E:E4:59:17:37:38:10:A5:46:48: 67:A8:BD:F9:A8:94:69:F1:DA:C0:31:43:8E:C5:A5:BB: 4B:55:D4:6B:C8:02:21:00:FD:58:B4:E7:1D:5E:99:C1: 88:17:0F:35:CD:4D:0D:D4:66:68:E3:8F:82:2E:7B:4D: AF:DD:13:2E:88:17:8C:6A
subjectAltName
DNS:aholddelhaize.com, DNS:cda.aholddelhaize.com, DNS:cms.aholddelhaize.com, DNS:media.aholddelhaize.com, DNS:nieuw.aholddelhaize.com, DNS:preview.aholddelhaize.com, DNS:www.aholddelhaize.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-07T01:02:13+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3453
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2046-03-21T23:59:59+00:00
Days remaining
7105
Serial (hex)
758DFD8BAE7C0700FAA925A7E1C7AD14
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7B:B6:47:A6:2A:EE:AC:88:BF:25:7A:A5:22:D0:1F:FE:A3:95:E0:AB:45:C7:3F:93:F6:56:54:EC:38:F2:5A:06
Certificate extensions & PEM
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →