DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

alte-leipziger.de · 91.217.145.100:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Hessen O=Alte Leipziger Lebensversicherung auf Gegenseitigkeit CN=www.alte-leipziger.de
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2026-07-17T00:00:00+00:00
Expires
2027-01-31T23:59:59+00:00
Days remaining
83
Serial (hex)
9AAF9DA7994262F4D951FCC3675215BE
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.alte-leipziger.de, DNS:aktion-berufsunfaehigkeit.alte-leipziger.de, DNS:aktion-motorrad.alte-leipziger.de, DNS:alte-leipziger-firmenkunden.de, DNS:alte-leipziger.de, DNS:alteleipziger.de, DNS:fin4u.de, DNS:fin4u.net, DNS:geschaeftsbericht.alte-leipziger.de, DNS:kindervorsorge-albaert.de, DNS:kindervorsorge-albert.de, DNS:lebenslang-geld.de, DNS:norwegen-konzept.de, DNS:officealteleipziger.de, DNS:privatschutz-neu-gedacht.de, DNS:prod-micro.alte-leipziger.de, DNS:vermittler-sind-uns-wichtig.de, DNS:www.alte-leipziger-ag.de, DNS:www.alte-leipziger-firmenkunden.de, DNS:www.alte-leipziger-fonds.de, DNS:www.alteleipziger.de, DNS:www.fin4u.de, DNS:www.fin4u.net, DNS:www.gewerbe-neu-entdecken.de, DNS:www.infoalteleipziger.de, DNS:www.kindervorsorge-albaert.de, DNS:www.kindervorsorge-albert.de, DNS:www.lebenslang-geld.de, DNS:www.norwegen-konzept.de, DNS:www.officealteleipziger.de, DNS:www.privatschutz-neu-gedacht.de, DNS:www.vermittler-sind-uns-wichtig.de, DNS:www.xn--kindervorsorge-albrt-szb.de, DNS:xn--kindervorsorge-albrt-szb.de

SHA-256 fingerprint

29:71:BC:C9:3D:BA:9B:8D:97:11:53:EF:8B:0F:1C:01:20:C3:43:DE:2B:0E:80:B9:60:D5:9D:DB:F3:8E:3D:80
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
51:DB:07:0B:E3:6F:93:F9:16:EF:19:65:B5:3A:F6:1A:7F:C6:AE:4C
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 17 10:50:50.440 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:1F:9F:FA:DC:B3:C1:C2:9F:B0:7F:7F:46: 37:8A:40:B6:BB:3D:0D:E8:00:81:31:3B:7E:27:50:37: AA:BB:46:02:02:20:1E:6D:EE:90:62:9A:EB:31:40:AE: 9A:B7:2F:52:FD:5E:EC:D6:BB:DA:E3:DB:D6:BC:53:19: C9:0C:14:0D:9A:C5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jul 17 10:50:51.255 2026 GMT Extensions: 00:00:05:00:06:46:E3:4C Signature : ecdsa-with-SHA256 30:44:02:20:63:0A:A6:92:A5:B1:9F:C2:D3:4D:6E:EB: 6C:7D:91:8F:F7:D4:A1:9C:B6:A6:DC:C1:6F:F6:3B:43: 62:1A:AD:1A:02:20:24:BD:CD:84:DC:7E:14:59:25:A0: 85:31:D4:A2:85:19:B9:55:23:51:93:38:04:B2:3C:E1: DC:98:C8:84:E9:F8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jul 17 10:50:50.631 2026 GMT Extensions: 00:00:05:00:00:4E:11:A9 Signature : ecdsa-with-SHA256 30:45:02:20:1C:FE:42:03:67:6A:C2:CA:BD:D7:EC:0E: 34:17:2D:9F:C8:F2:AD:AF:D8:AF:2B:F1:89:CA:F3:CC: 30:E5:4E:21:02:21:00:A2:53:9C:35:4E:25:A3:7D:B1: 5F:AC:76:C0:02:2D:2A:A3:30:EF:DB:05:E5:86:FF:F8: 50:99:83:4E:BA:EF:81
subjectAltName
DNS:www.alte-leipziger.de, DNS:aktion-berufsunfaehigkeit.alte-leipziger.de, DNS:aktion-motorrad.alte-leipziger.de, DNS:alte-leipziger-firmenkunden.de, DNS:alte-leipziger.de, DNS:alteleipziger.de, DNS:fin4u.de, DNS:fin4u.net, DNS:geschaeftsbericht.alte-leipziger.de, DNS:kindervorsorge-albaert.de, DNS:kindervorsorge-albert.de, DNS:lebenslang-geld.de, DNS:norwegen-konzept.de, DNS:officealteleipziger.de, DNS:privatschutz-neu-gedacht.de, DNS:prod-micro.alte-leipziger.de, DNS:vermittler-sind-uns-wichtig.de, DNS:www.alte-leipziger-ag.de, DNS:www.alte-leipziger-firmenkunden.de, DNS:www.alte-leipziger-fonds.de, DNS:www.alteleipziger.de, DNS:www.fin4u.de, DNS:www.fin4u.net, DNS:www.gewerbe-neu-entdecken.de, DNS:www.infoalteleipziger.de, DNS:www.kindervorsorge-albaert.de, DNS:www.kindervorsorge-albert.de, DNS:www.lebenslang-geld.de, DNS:www.norwegen-konzept.de, DNS:www.officealteleipziger.de, DNS:www.privatschutz-neu-gedacht.de, DNS:www.vermittler-sind-uns-wichtig.de, DNS:www.xn--kindervorsorge-albrt-szb.de, DNS:xn--kindervorsorge-albrt-szb.de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-09T19:16:53+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3420
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4088
Serial (hex)
D27FBBC1DE359E5216AD6149586099C4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw
gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx
MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV
BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy
dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct
pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB
fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ
SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR
8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34
MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm
tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo
iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik
yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE
cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr
+vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA
AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud
DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T
AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g
BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy
dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1
BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz
dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0
S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24
RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ
uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP
q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae
QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1
VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb
9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH
Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E
oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU
bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2
Rnnyp58XRStJ
-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4088
Serial (hex)
01FD6D30FCA3CA51A81BBC640E35032D
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
Certificate extensions & PEM
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----
MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB
iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAw
MjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNV
BAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU
aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2Vy
dGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCAEmUXNg7D2wiz0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B
3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2jY0K2dvKpOyuR+OJv0OwWIJAJPuLodMkY
tJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFnRghRy4YUVD+8M/5+bJz/
Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O+T23LLb2
VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT
79uq/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6
c0Plfg6lZrEpfDKEY1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmT
Yo61Zs8liM2EuLE/pDkP2QKe6xJMlXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97l
c6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8yexDJtC/QV9AqURE9JnnV4ee
UB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+eLf8ZxXhyVeE
Hg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd
BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8G
A1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPF
Up/L+M+ZBn8b2kMVn54CVVeWFPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KO
VWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ7l8wXEskEVX/JJpuXior7gtNn3/3
ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQEg9zKC7F4iRO/Fjs
8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM8WcR
iQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYze
Sf7dNXGiFSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZ
XHlKYC6SQK5MNyosycdiyA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/
qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9cJ2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRB
VXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGwsAvgnEzDHNb842m1R0aB
L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG
jjxDah2nGN59PRbxYvnKkKj9
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →