DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

blackbaud.com · 52.173.94.173:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=South Carolina L=Charleston O=Blackbaud, Inc. CN=*.blackbaud.com
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Valid from
2025-11-05T00:00:00+00:00
Expires
2026-11-24T23:59:59+00:00
Days remaining
55
Serial (hex)
038CAFBE9B3769C80001F5BE3623611C
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.blackbaud.com, DNS:blackbaud.com

SHA-256 fingerprint

51:3F:09:A6:4A:96:4C:A9:D3:FD:81:B2:98:6A:91:3D:84:19:20:54:21:88:35:43:DB:27:10:78:40:02:19:42
Certificate extensions & PEM
authorityKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
subjectKeyIdentifier
17:76:74:3A:9B:61:A9:62:E8:CF:BD:52:9A:C9:CF:86:CD:C3:D8:BE
subjectAltName
DNS:*.blackbaud.com, DNS:blackbaud.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 5 16:36:08.710 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:CF:66:1A:D2:E6:50:26:51:B1:A7:A8: 25:E3:69:35:0B:F2:9B:56:1E:92:53:11:CD:52:30:8A: 97:23:8E:13:9B:02:21:00:FF:0D:94:C7:F7:75:E8:85: 7E:7A:40:79:B5:D2:70:0C:00:5A:1C:58:3B:0C:0C:0E: 6A:5A:75:75:F8:0D:11:CC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 5 16:36:08.725 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:AC:C5:76:66:87:3E:2F:9C:6D:EE:AA: 0F:36:84:6E:ED:E2:FA:27:F4:FA:39:27:D4:17:13:AC: AE:17:B6:F8:6B:02:20:2E:A2:CD:29:0D:01:4B:64:16: 6F:B6:08:B8:80:84:71:7E:13:CC:E8:66:4E:8B:1B:38: DB:C8:6E:4E:90:69:91 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 5 16:36:08.745 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:69:84:E1:13:2F:07:90:22:15:E6:27:AA: 8C:61:1A:3B:4F:32:F0:90:58:23:6E:B4:95:B7:95:09: D1:B5:4E:B7:02:20:0A:DD:8A:25:1B:1B:49:72:7A:E1: DE:54:F3:18:9F:55:C5:85:CA:AB:E0:A5:3F:69:92:87: 9C:26:2A:3A:29:DC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-30T19:03:21+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:23:37+00:00
Expires
2027-11-02T12:23:37+00:00
Days remaining
397
Serial (hex)
0D07782A133FC6F9A57296E131FFD179
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
Certificate extensions & PEM
subjectKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →