SSL certificate
TLSv1.3alofthotels.com · 3.214.21.245:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=US ST=Maryland O=Marriott International Inc. CN=san3.marriottbonvoy.com
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R40
- Valid from
- 2026-08-03T00:00:00+00:00
- Expires
- 2027-02-17T23:59:59+00:00
- Days remaining
- 144
- Serial (hex)
- 1EF3FE80200248B9A352C684FEB86DB2
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:san3.marriottbonvoy.com, DNS:ac-hotels.com, DNS:alofthotels.com, DNS:app-insiders.marriott.com, DNS:autographhotels.com, DNS:clean.arabic.marriott.com, DNS:clean.espanol.marriott.com, DNS:clean.marriott.co.jp, DNS:clean.marriott.co.kr, DNS:clean.marriott.com, DNS:clean.marriott.com.br, DNS:clean.marriott.com.cn, DNS:clean.marriott.de, DNS:clean.marriott.fr, DNS:clean.marriott.it, DNS:corporatedealses.marriott.com, DNS:courtyard.com, DNS:deltahotels.com, DNS:elementhotels.com, DNS:fairfieldbymarriott.com, DNS:fairfieldinn.com, DNS:fourpoints.com, DNS:hotel-residences.marriott.com, DNS:insiders.marriott.com, DNS:jwmarriott.com, DNS:lemeridien.com, DNS:lookup.marriottbonvoy.com, DNS:marriottexecutiveapartments.com, DNS:marriotthotels.com, DNS:marriottrewardsinsiders.marriott.com, DNS:milux.marriott.com, DNS:moxyhotels.com, DNS:mrinsiders.marriott.com, DNS:mvcrentals.marriott.com, DNS:proteahotels.co.za, DNS:renaissancehotels.com, DNS:residenceinn.com, DNS:salesforcedeals.marriott.com, DNS:sheraton.com, DNS:spg-moments.marriott.com, DNS:spgpromos.com, DNS:springhillsuites.com, DNS:stregis.com, DNS:tedtalksmarriott.com, DNS:theluxurycollection.com, DNS:towneplacesuites.com, DNS:traveldeals.marriott.com.au, DNS:tributeportfolio.com, DNS:westin.com, DNS:workopps.marriott.com, DNS:workops.marriott.com, DNS:www.ac-hotels.com, DNS:www.alofthotels.com, DNS:www.app-insiders.marriott.com, DNS:www.autographhotels.com, DNS:www.clean.arabic.marriott.com, DNS:www.clean.espanol.marriott.com, DNS:www.clean.marriott.co.jp, DNS:www.clean.marriott.co.kr, DNS:www.clean.marriott.com, DNS:www.clean.marriott.com.br, DNS:www.clean.marriott.com.cn, DNS:www.clean.marriott.de, DNS:www.clean.marriott.fr, DNS:www.clean.marriott.it, DNS:www.corporatedealses.marriott.com, DNS:www.courtyard.com, DNS:www.deltahotels.com, DNS:www.elementhotels.com, DNS:www.fairfieldbymarriott.com, DNS:www.fairfieldinn.com, DNS:www.fourpoints.com, DNS:www.hotel-residences.marriott.com, DNS:www.insiders.marriott.com, DNS:www.jwmarriott.com, DNS:www.lemeridien.com, DNS:www.lookup.marriottbonvoy.com, DNS:www.marriottexecutiveapartments.com, DNS:www.marriotthotels.com, DNS:www.marriottrewardsinsiders.marriott.com, DNS:www.milux.marriott.com, DNS:www.moxyhotels.com, DNS:www.mrinsiders.marriott.com, DNS:www.mvcrentals.marriott.com, DNS:www.proteahotels.co.za, DNS:www.renaissancehotels.com, DNS:www.residenceinn.com, DNS:www.salesforcedeals.marriott.com, DNS:www.san3.marriottbonvoy.com, DNS:www.sheraton.com, DNS:www.spg-moments.marriott.com, DNS:www.spgpromos.com, DNS:www.springhillsuites.com, DNS:www.stregis.com, DNS:www.tedtalksmarriott.com, DNS:www.theluxurycollection.com, DNS:www.towneplacesuites.com, DNS:www.traveldeals.marriott.com.au, DNS:www.tribrandnashville.marriott.com, DNS:www.tributeportfolio.com, DNS:www.westin.com, DNS:www.workopps.marriott.com, DNS:www.workops.marriott.com, DNS:www.youarehere.marriott.com, DNS:youarehere.marriott.com
SHA-256 fingerprint
DA:7C:43:61:14:F3:23:EA:95:CF:4C:57:8B:19:91:F7:2D:65:9B:B5:BE:B3:BE:5D:2D:7D:35:8B:0A:E7:63:3C
Certificate extensions & PEM
- authorityKeyIdentifier
- 7B:E2:49:A1:60:B4:BB:E8:42:E6:C6:A7:54:11:1C:61:64:53:55:D1
- subjectKeyIdentifier
- 3E:22:38:99:60:3F:A4:83:4C:86:EF:A1:CB:DE:4B:1D:E1:20:F7:E0
- keyUsage
- Digital Signature, Key Encipherment
- basicConstraints
- CA:FALSE
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 2.23.140.1.2.2
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR40.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR40.crt OCSP - URI:http://ocsp.sectigo.com
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 3 17:23:48.912 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:30:F8:7E:2C:28:B6:4C:5F:48:66:31:9C: 2C:A0:8F:45:E0:E1:22:3B:15:85:FB:85:31:9F:47:A3: CD:C7:C7:01:02:21:00:A7:8D:F6:0F:49:5E:37:ED:14: 75:6B:C1:6D:73:10:9A:7F:B7:9D:B9:59:F8:7A:85:56: 32:5E:46:B9:85:01:C8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Aug 3 17:23:49.784 2026 GMT Extensions: 00:00:05:00:07:A9:BF:93 Signature : ecdsa-with-SHA256 30:45:02:21:00:C5:9B:18:85:CA:58:5C:A7:C8:47:19: F0:C1:DA:A8:64:B5:1C:C7:A3:70:47:B8:5C:ED:E2:E2: D7:07:E4:FC:A2:02:20:2E:61:DD:2A:E3:1E:2A:A7:A5: DD:6E:04:E1:39:71:F2:5C:92:52:A6:EB:41:F8:B0:05: 9B:13:7E:50:DA:8D:F1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Aug 3 17:23:48.972 2026 GMT Extensions: 00:00:05:00:00:59:08:43 Signature : ecdsa-with-SHA256 30:45:02:20:47:6F:DD:6D:7D:69:25:4C:2B:E7:6B:FA: F8:34:CB:F4:33:C1:DA:8B:B2:AD:E0:B3:9C:CC:78:D2: C4:57:6D:B0:02:21:00:FB:15:32:A8:FF:F8:9C:83:93: 15:DB:0C:D8:4C:E4:41:E9:E0:9E:2F:F8:58:5A:9C:7C: 38:C1:34:D8:10:29:8D
- subjectAltName
- DNS:san3.marriottbonvoy.com, DNS:ac-hotels.com, DNS:alofthotels.com, DNS:app-insiders.marriott.com, DNS:autographhotels.com, DNS:clean.arabic.marriott.com, DNS:clean.espanol.marriott.com, DNS:clean.marriott.co.jp, DNS:clean.marriott.co.kr, DNS:clean.marriott.com, DNS:clean.marriott.com.br, DNS:clean.marriott.com.cn, DNS:clean.marriott.de, DNS:clean.marriott.fr, DNS:clean.marriott.it, DNS:corporatedealses.marriott.com, DNS:courtyard.com, DNS:deltahotels.com, DNS:elementhotels.com, DNS:fairfieldbymarriott.com, DNS:fairfieldinn.com, DNS:fourpoints.com, DNS:hotel-residences.marriott.com, DNS:insiders.marriott.com, DNS:jwmarriott.com, DNS:lemeridien.com, DNS:lookup.marriottbonvoy.com, DNS:marriottexecutiveapartments.com, DNS:marriotthotels.com, DNS:marriottrewardsinsiders.marriott.com, DNS:milux.marriott.com, DNS:moxyhotels.com, DNS:mrinsiders.marriott.com, DNS:mvcrentals.marriott.com, DNS:proteahotels.co.za, DNS:renaissancehotels.com, DNS:residenceinn.com, DNS:salesforcedeals.marriott.com, DNS:sheraton.com, DNS:spg-moments.marriott.com, DNS:spgpromos.com, DNS:springhillsuites.com, DNS:stregis.com, DNS:tedtalksmarriott.com, DNS:theluxurycollection.com, DNS:towneplacesuites.com, DNS:traveldeals.marriott.com.au, DNS:tributeportfolio.com, DNS:westin.com, DNS:workopps.marriott.com, DNS:workops.marriott.com, DNS:www.ac-hotels.com, DNS:www.alofthotels.com, DNS:www.app-insiders.marriott.com, DNS:www.autographhotels.com, DNS:www.clean.arabic.marriott.com, DNS:www.clean.espanol.marriott.com, DNS:www.clean.marriott.co.jp, DNS:www.clean.marriott.co.kr, DNS:www.clean.marriott.com, DNS:www.clean.marriott.com.br, DNS:www.clean.marriott.com.cn, DNS:www.clean.marriott.de, DNS:www.clean.marriott.fr, DNS:www.clean.marriott.it, DNS:www.corporatedealses.marriott.com, DNS:www.courtyard.com, DNS:www.deltahotels.com, DNS:www.elementhotels.com, DNS:www.fairfieldbymarriott.com, DNS:www.fairfieldinn.com, DNS:www.fourpoints.com, DNS:www.hotel-residences.marriott.com, DNS:www.insiders.marriott.com, DNS:www.jwmarriott.com, DNS:www.lemeridien.com, DNS:www.lookup.marriottbonvoy.com, DNS:www.marriottexecutiveapartments.com, DNS:www.marriotthotels.com, DNS:www.marriottrewardsinsiders.marriott.com, DNS:www.milux.marriott.com, DNS:www.moxyhotels.com, DNS:www.mrinsiders.marriott.com, DNS:www.mvcrentals.marriott.com, DNS:www.proteahotels.co.za, DNS:www.renaissancehotels.com, DNS:www.residenceinn.com, DNS:www.salesforcedeals.marriott.com, DNS:www.san3.marriottbonvoy.com, DNS:www.sheraton.com, DNS:www.spg-moments.marriott.com, DNS:www.spgpromos.com, DNS:www.springhillsuites.com, DNS:www.stregis.com, DNS:www.tedtalksmarriott.com, DNS:www.theluxurycollection.com, DNS:www.towneplacesuites.com, DNS:www.traveldeals.marriott.com.au, DNS:www.tribrandnashville.marriott.com, DNS:www.tributeportfolio.com, DNS:www.westin.com, DNS:www.workopps.marriott.com, DNS:www.workops.marriott.com, DNS:www.youarehere.marriott.com, DNS:youarehere.marriott.com
-----BEGIN CERTIFICATE----- MIIQvjCCDyagAwIBAgIQHvP+gCACSLmjUsaE/rhtsjANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgT1YgUjQw MB4XDTI2MDgwMzAwMDAwMFoXDTI3MDIxNzIzNTk1OVowaDELMAkGA1UEBhMCVVMx ETAPBgNVBAgTCE1hcnlsYW5kMSQwIgYDVQQKExtNYXJyaW90dCBJbnRlcm5hdGlv bmFsIEluYy4xIDAeBgNVBAMTF3NhbjMubWFycmlvdHRib252b3kuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWVuPGrybMYyx+eVNZ35hm2IbqOH aj68HBrldjw4X7t2UZpQrX9bP7MydQBEV1PvjFmhPWmxZ1mbV0io7OSvF9aqBLSK E12m9+MI0MKZ1Y2qE/BsdwpeXALL+nSFA/YJVskp/ufmWl++P4ZXx/us9kEFn/D/ ytZLKrcN8ycCWWe9V5Lzxb+alJ6YpZHYL2RV8FFG49ywJJJmV8crWn2W6LzIX/41 k0d+Ohq4rbUR2rlH+Fi7Hmp5pmSpzB34EhG9so5hg5O478B4DBwQOlUSGTHcFQTa is/LPKJCIHBgp9dKmQtPKLAO5XmCv09RIbDe1Co2yNC1O4Me6nqRi89KwQIDAQAB o4IM6jCCDOYwHwYDVR0jBBgwFoAUe+JJoWC0u+hC5sanVBEcYWRTVdEwHQYDVR0O BBYEFD4iOJlgP6SDTIbvocveSx3hIPfgMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMB Af8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBMGA1UdIAQMMAowCAYGZ4EMAQIC MFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGln b1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uQ0FPVlI0MC5jcmwwgYQGCCsGAQUF BwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0 aWdvUHVibGljU2VydmVyQXV0aGVudGljYXRpb25DQU9WUjQwLmNydDAjBggrBgEF BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggGOBgorBgEEAdZ5AgQCBIIB fgSCAXoBeAB2AByfaCzp+vBFaVD4G5aKh93bMhDYTObIsuOCUkrEz1mfAAABn8in NDAAAAQDAEcwRQIgMPh+LCi2TF9IZjGcLKCPReDhIjsVhfuFMZ9Ho83HxwECIQCn jfYPSV437RR1a8FtcxCaf7eduVn4eoVWMl5GuYUByAB+AI7KRwus3mrzogawpHqE t0b+H8a/lT4l5ptO5AJI88boAAABn8inN5gACAAABQAHqb+TBAMARzBFAiEAxZsY hcpYXKfIRxnwwdqoZLUcx6NwR7hc7eLi1wfk/KICIC5h3SrjHiqnpd1uBOE5cfJc klKm60H4sAWbE35Q2o3xAH4AWW5sM4aUsllyolbIoOjdkEp26Ag92oc7AQg4KBQ8 7lkAAAGfyKc0bAAIAAAFAABZCEMEAwBHMEUCIEdv3W19aSVMK+dr+vg0y/QzwdqL sq3gs5zMeNLEV22wAiEA+xUyqP/4nIOTFdsM2EzkQengni/4WFqcfDjBNNgQKY0w ggnrBgNVHREEggniMIIJ3oIXc2FuMy5tYXJyaW90dGJvbnZveS5jb22CDWFjLWhv dGVscy5jb22CD2Fsb2Z0aG90ZWxzLmNvbYIZYXBwLWluc2lkZXJzLm1hcnJpb3R0 LmNvbYITYXV0b2dyYXBoaG90ZWxzLmNvbYIZY2xlYW4uYXJhYmljLm1hcnJpb3R0 LmNvbYIaY2xlYW4uZXNwYW5vbC5tYXJyaW90dC5jb22CFGNsZWFuLm1hcnJpb3R0 LmNvLmpwghRjbGVhbi5tYXJyaW90dC5jby5rcoISY2xlYW4ubWFycmlvdHQuY29t ghVjbGVhbi5tYXJyaW90dC5jb20uYnKCFWNsZWFuLm1hcnJpb3R0LmNvbS5jboIR Y2xlYW4ubWFycmlvdHQuZGWCEWNsZWFuLm1hcnJpb3R0LmZyghFjbGVhbi5tYXJy aW90dC5pdIIdY29ycG9yYXRlZGVhbHNlcy5tYXJyaW90dC5jb22CDWNvdXJ0eWFy ZC5jb22CD2RlbHRhaG90ZWxzLmNvbYIRZWxlbWVudGhvdGVscy5jb22CF2ZhaXJm aWVsZGJ5bWFycmlvdHQuY29tghBmYWlyZmllbGRpbm4uY29tgg5mb3VycG9pbnRz LmNvbYIdaG90ZWwtcmVzaWRlbmNlcy5tYXJyaW90dC5jb22CFWluc2lkZXJzLm1h cnJpb3R0LmNvbYIOandtYXJyaW90dC5jb22CDmxlbWVyaWRpZW4uY29tghlsb29r dXAubWFycmlvdHRib252b3kuY29tgh9tYXJyaW90dGV4ZWN1dGl2ZWFwYXJ0bWVu dHMuY29tghJtYXJyaW90dGhvdGVscy5jb22CJG1hcnJpb3R0cmV3YXJkc2luc2lk ZXJzLm1hcnJpb3R0LmNvbYISbWlsdXgubWFycmlvdHQuY29tgg5tb3h5aG90ZWxz LmNvbYIXbXJpbnNpZGVycy5tYXJyaW90dC5jb22CF212Y3JlbnRhbHMubWFycmlv dHQuY29tghJwcm90ZWFob3RlbHMuY28uemGCFXJlbmFpc3NhbmNlaG90ZWxzLmNv bYIQcmVzaWRlbmNlaW5uLmNvbYIcc2FsZXNmb3JjZWRlYWxzLm1hcnJpb3R0LmNv bYIMc2hlcmF0b24uY29tghhzcGctbW9tZW50cy5tYXJyaW90dC5jb22CDXNwZ3By b21vcy5jb22CFHNwcmluZ2hpbGxzdWl0ZXMuY29tggtzdHJlZ2lzLmNvbYIUdGVk dGFsa3NtYXJyaW90dC5jb22CF3RoZWx1eHVyeWNvbGxlY3Rpb24uY29tghR0b3du ZXBsYWNlc3VpdGVzLmNvbYIbdHJhdmVsZGVhbHMubWFycmlvdHQuY29tLmF1ghR0 cmlidXRlcG9ydGZvbGlvLmNvbYIKd2VzdGluLmNvbYIVd29ya29wcHMubWFycmlv dHQuY29tghR3b3Jrb3BzLm1hcnJpb3R0LmNvbYIRd3d3LmFjLWhvdGVscy5jb22C E3d3dy5hbG9mdGhvdGVscy5jb22CHXd3dy5hcHAtaW5zaWRlcnMubWFycmlvdHQu Y29tghd3d3cuYXV0b2dyYXBoaG90ZWxzLmNvbYIdd3d3LmNsZWFuLmFyYWJpYy5t YXJyaW90dC5jb22CHnd3dy5jbGVhbi5lc3Bhbm9sLm1hcnJpb3R0LmNvbYIYd3d3 LmNsZWFuLm1hcnJpb3R0LmNvLmpwghh3d3cuY2xlYW4ubWFycmlvdHQuY28ua3KC Fnd3dy5jbGVhbi5tYXJyaW90dC5jb22CGXd3dy5jbGVhbi5tYXJyaW90dC5jb20u YnKCGXd3dy5jbGVhbi5tYXJyaW90dC5jb20uY26CFXd3dy5jbGVhbi5tYXJyaW90 dC5kZYIVd3d3LmNsZWFuLm1hcnJpb3R0LmZyghV3d3cuY2xlYW4ubWFycmlvdHQu aXSCIXd3dy5jb3Jwb3JhdGVkZWFsc2VzLm1hcnJpb3R0LmNvbYIRd3d3LmNvdXJ0 eWFyZC5jb22CE3d3dy5kZWx0YWhvdGVscy5jb22CFXd3dy5lbGVtZW50aG90ZWxz LmNvbYIbd3d3LmZhaXJmaWVsZGJ5bWFycmlvdHQuY29tghR3d3cuZmFpcmZpZWxk aW5uLmNvbYISd3d3LmZvdXJwb2ludHMuY29tgiF3d3cuaG90ZWwtcmVzaWRlbmNl cy5tYXJyaW90dC5jb22CGXd3dy5pbnNpZGVycy5tYXJyaW90dC5jb22CEnd3dy5q d21hcnJpb3R0LmNvbYISd3d3LmxlbWVyaWRpZW4uY29tgh13d3cubG9va3VwLm1h cnJpb3R0Ym9udm95LmNvbYIjd3d3Lm1hcnJpb3R0ZXhlY3V0aXZlYXBhcnRtZW50 cy5jb22CFnd3dy5tYXJyaW90dGhvdGVscy5jb22CKHd3dy5tYXJyaW90dHJld2Fy ZHNpbnNpZGVycy5tYXJyaW90dC5jb22CFnd3dy5taWx1eC5tYXJyaW90dC5jb22C End3dy5tb3h5aG90ZWxzLmNvbYIbd3d3Lm1yaW5zaWRlcnMubWFycmlvdHQuY29t ght3d3cubXZjcmVudGFscy5tYXJyaW90dC5jb22CFnd3dy5wcm90ZWFob3RlbHMu Y28uemGCGXd3dy5yZW5haXNzYW5jZWhvdGVscy5jb22CFHd3dy5yZXNpZGVuY2Vp bm4uY29tgiB3d3cuc2FsZXNmb3JjZWRlYWxzLm1hcnJpb3R0LmNvbYIbd3d3LnNh bjMubWFycmlvdHRib252b3kuY29tghB3d3cuc2hlcmF0b24uY29tghx3d3cuc3Bn LW1vbWVudHMubWFycmlvdHQuY29tghF3d3cuc3BncHJvbW9zLmNvbYIYd3d3LnNw cmluZ2hpbGxzdWl0ZXMuY29tgg93d3cuc3RyZWdpcy5jb22CGHd3dy50ZWR0YWxr c21hcnJpb3R0LmNvbYIbd3d3LnRoZWx1eHVyeWNvbGxlY3Rpb24uY29tghh3d3cu dG93bmVwbGFjZXN1aXRlcy5jb22CH3d3dy50cmF2ZWxkZWFscy5tYXJyaW90dC5j b20uYXWCInd3dy50cmlicmFuZG5hc2h2aWxsZS5tYXJyaW90dC5jb22CGHd3dy50 cmlidXRlcG9ydGZvbGlvLmNvbYIOd3d3Lndlc3Rpbi5jb22CGXd3dy53b3Jrb3Bw cy5tYXJyaW90dC5jb22CGHd3dy53b3Jrb3BzLm1hcnJpb3R0LmNvbYIbd3d3Lnlv dWFyZWhlcmUubWFycmlvdHQuY29tghd5b3VhcmVoZXJlLm1hcnJpb3R0LmNvbTAN BgkqhkiG9w0BAQsFAAOCAYEAR9jFzlHaXS49rOj2RkmsJPe7tTxL3kfA3aBE5esh 5qOWuah9SAsy53u2WLChFqGPhhW4rUrpGKFAnI+3wI6lG8oWEhj8ez4jfEBiRFDJ 5GyPR5BrPOD2LOvAEd9BJSt0AZLLwNTyx4/9sRQVN+3ikKprt3/kPqqX3z7jTfHh pdi4p8BipRniP6AJ+K5IJGs3x0Ria/upO39qbYjs8c5TTd3E92lCBFk+GiQGwGBl wBWe3mZnxRLy80Q7BnSdHx6llyYnTPuGCw2g73acdPaexftTn6o0DGu8or5GEV33 6Paq1kkivBxjcVnJNFaPbKQcHzMOjxJbh6+80rFuHthS/g17aGGwb/z735oM4iHh NS+mYnIwjneEwp+1rr7nPthZhgxJwhzS02obrMcBSP9ecDF0Cv3+sh5mlQp2if3q Faa4uDshIiahpYNsB7gI4y/mbjuBpssXK7ONHzgtz9FQDnV2Rpbz+Z5AYJlZnwsc RCnCI3GwFDfVPjjax+j/yAti -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-26T00:37:08+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R40
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Valid from
- 2025-05-14T00:00:00+00:00
- Expires
- 2040-05-13T23:59:59+00:00
- Days remaining
- 4978
- Serial (hex)
- 9B50A3D94BE4C7330212454BCC687378
- Signature
- RSA-SHA384
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
8E:B2:F1:7D:66:89:41:C3:9A:7F:CA:0C:EE:12:7A:E0:EB:AF:44:46:10:63:1C:CA:3C:D1:9E:AB:46:C5:82:4A
Certificate extensions & PEM
- authorityKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- subjectKeyIdentifier
- 7B:E2:49:A1:60:B4:BB:E8:42:E6:C6:A7:54:11:1C:61:64:53:55:D1
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:0
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 2.23.140.1.2.2
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE----- MIIGOzCCBCOgAwIBAgIRAJtQo9lL5MczAhJFS8xoc3gwDQYJKoZIhvcNAQEMBQAw XzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UE AxMtU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2 MB4XDTI1MDUxNDAwMDAwMFoXDTQwMDUxMzIzNTk1OVowYDELMAkGA1UEBhMCR0Ix GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UEAxMuU2VjdGlnbyBQdWJs aWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIENBIE9WIFI0MDCCAaIwDQYJKoZIhvcN AQEBBQADggGPADCCAYoCggGBAIlSHqpFAFB5FVW5J1XfsOxTmd5YQvl3LTnrYYVf eoamvgK7A71WHHX4RXMFelolbXULkHL2NwTGKHIiykTQTqnvSRaU0NAWGw/zTSbw VK6TN2tw5Lhys2PF+nGJTXkii5fqTchwesB0Il/94vkbbvNIEN3i/4RoRDpIAqRP SINzKOwhKrZ5yejAVM5gS0bOi8yn5j4c74PPEmr+qJ8rp04d9BEnXKGYQNk069f1 KTwlSgvc0n0ZmloYp6LUomjBYiX53jSYJAsmacshPUw5VZ6ti/tlVmTeq9yi0ICe XJhStXMmH8zFut4hr3G77JTT1swJF+w0VnwMIhVuQKDmIpVmuJvgBsKB3ffS94C+ SilLXyWFt+zr7KMFKWg3ElsQRpJzqUYfeKZKQ04RIjBNf+eScSUebEpwV6tcf4mw 5tDisbAjgyn1ST5WlascokKYW93RMv6NinELJ5WEsO/J7OC8rw34H4YhyMJfUe68 ZmPaF6Q72NzBaoxpPROtUPn6CQIDAQABo4IBbzCCAWswHwYDVR0jBBgwFoAUVnNY ZJX5khqwEioEYnmhQBWIIUkwHQYDVR0OBBYEFHviSaFgtLvoQubGp1QRHGFkU1XR MA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMBMGA1UdJQQMMAoG CCsGAQUFBwMBMBMGA1UdIAQMMAowCAYGZ4EMAQICMFQGA1UdHwRNMEswSaBHoEWG Q2h0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY1NlcnZlckF1dGhl bnRpY2F0aW9uUm9vdFI0Ni5jcmwwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcw AoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUHVibGljU2VydmVyQXV0 aGVudGljYXRpb25Sb290UjQ2LnA3YzAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au c2VjdGlnby5jb20wDQYJKoZIhvcNAQEMBQADggIBAFAufRwhEW91VWsDvjejAhWg drPqDVSh7gNeo40fI+V2dT557ABemJ7/NnzylJvjX5bYeToiUGI+MladTJQL4aOB glG2hfQXOT++PM9eM8+gztEzCoNdqe1phQA64DqulrabuzMUNQfUqTZJlswiGh3L XZXyrxodS+G2duhPhuWIQTfIZHSSYjiFMsuZHFyjm+plHQDVhK7BI3fSrtFVny0q gpolbiha1TuaCo6P7/7l5j54HBOLO7byq8uc9D83I9mW+ZLN9ZaC82maxdmvXWln Ubc8BUClomt9iIxNLmwE3w9bp+0hFVHc+Ud6AI5ZFeTDQ+f6HNpDY26GXFAx48Sg z+/+jDfGIDLhZ9cI8jGy2m+AR9T+K9JVszzyXrZI6P6VZGgHh8V+tZ5NDWG5yLLW N+9pKKmkY4tpQ8Gmb26dnbdD+x+I7Y6S4Cc9HcstpM5v+wKt/JJly9eU31GHucfg cd+G1b2BFuN5p0mLHh6t5R9MZG3xG3GEqNYSM5049FDOl5ZaMGRqk0uN31obMJ8w mAzRNWgEm28ebPhbVgfCmcCxn06xdoZ8G1AkeSWwVzbH05tEK5ly2pWJ5QSzIW/c Joxchdy1k8eXj0Eu0yaqlKZDh95Tlhuq37ZbFWwzynqUIvAYKjI8PQwIIR8EoOx8 M2A5O6N9rci7TeBnWdo+ -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2046-03-21T23:59:59+00:00
- Days remaining
- 7116
- Serial (hex)
- 758DFD8BAE7C0700FAA925A7E1C7AD14
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
7B:B6:47:A6:2A:EE:AC:88:BF:25:7A:A5:22:D0:1F:FE:A3:95:E0:AB:45:C7:3F:93:F6:56:54:EC:38:F2:5A:06
Certificate extensions & PEM
- subjectKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
-----BEGIN CERTIFICATE----- MIIFijCCA3KgAwIBAgIQdY39i658BwD6qSWn4cetFDANBgkqhkiG9w0BAQwFADBf MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw HhcNMjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1OTU5WjBfMQswCQYDVQQGEwJHQjEY MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1Ymxp YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCTvtU2UnXYASOgHEdCSe5jtrch/cSV1UgrJnwUUxDa ef0rty2k1Cz66jLdScK5vQ9IPXtamFSvnl0xdE8H/FAh3aTPaE8bEmNtJZlMKpnz SDBh+oF8HqcIStw+KxwfGExxqjWMrfhu6DtK2eWUAtaJhBOqbchPM8xQljeSM9xf iOefVNlI8JhD1mb9nxc4Q8UBUQvX4yMPFF1bFOdLvt30yNoDN9HWOaEhUTCDsG3X ME6WW5HwcCSrv0WBZEMNvSE6Lzzpng3LILVCJ8zab5vuZDCQOc2TZYEhMbUjUDM3 IuM47fgxMMxF/mL50V0yeUKH32rMVhlATc6qu/m1dkmU8Sf4kaWD5QazYw6A3OAS VYCmO2a0OYctyPDQ0RTp5A1NDvZdV3LFOxxHVp3i1fuBYYzMTYCQNFu31xR13NgE SJ/AwSiItOkcyqex8Va3e0lMWeUgFaiEAin6OJRpmkkGj80feRQXEgyDet4fsZfu +Zd4KKTIRJLpfSYFplhym3kT2BFfrsU4YjRosoYwjviQYZ4ybPUHNs2iTG7sijbt 8uaZFURww3y8nDnAtOFr94MlI1fZEoDlSfB1D++N6xybVCi0ITz8fAr/73trdf+L HaAZBav6+CuBQug4urv7qv094PPK306Xlynt8xhW6aWWrL3DkJiy4Pmi1KZHQ3xt zwIDAQABo0IwQDAdBgNVHQ4EFgQUVnNYZJX5khqwEioEYnmhQBWIIUkwDgYDVR0P AQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAC9c mTz8Bl6MlC5w6tIyMY208FHVvArzZJ8HXtXBc2hkeqK5Duj5XYUtqDdFqij0lgVQ YKlJfp/imTYpE0RHap1VIDzYm/EDMrraQKFz6oOht0SmDpkBm+S8f74TlH7Kph52 gDY9hAaLMyZlbcp+nv4fjFg4exqDsQ+8FxG75gbMY/qB8oFM2gsQa6H61SilzwZA Fv97fRheORKkU55+MkIQpiGRqRxOF3yEvJ+M0ejf5lG5Nkc/kLnHvALcWxxPDkjB JYOcCj+esQMzEhonrPcibCTRAUH4WAP+JWgiH5paPHxsnnVI84HxZmduTILA7rpX DhjvLpr3Etiga+kFpaHpaPi8TD8SHkXoUsCjvxInebnMMTzD9joiFgOgyY9mpFui TdaBJQbpdqQACj7LzTWb4OE4y2BThihCQRxEV+ioratF4yUQvNs+ZUH7G6aXD+u5 dHn5HrwdVw1Hr8Mvn4dGp+smWg9WY7ViYG4A++MnESLn/pmPNPW56MORcr3Ywx65 LvKRRFHQV80MNNVIIb/bE/FmJUNS0nAiNs2fxBx1IK1jcmMGDw4nztJqDby1ORrp 0XZ60Vzk50lJLVU3aPAaOpg+VBeHVOmmJ1CJeyAvP/+/oYtKR5j/K3tJPsMpRmAY QqszKbrAKbkTidOIijlBO8n9pu0f9GBj39ItVQGL -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.