DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

chefkoch.de · 151.101.195.52:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.chefkoch.de
Issuer
C=US O=Certainly CN=Certainly Intermediate R1
Valid from
2026-11-03T12:03:34+00:00
Expires
2026-12-03T12:03:33+00:00
Days remaining
18
Serial (hex)
7898B984C69F662BB3C44495C1FA6AD74DA2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.chefkoch.de, DNS:chefkoch.de

SHA-256 fingerprint

79:CD:AD:1B:4D:D8:1C:77:C9:12:3F:87:05:F3:E0:3B:64:4A:DA:3A:39:7E:04:72:78:D3:35:89:75:26:E0:B9
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
EA:5F:44:7F:23:E4:79:32:F0:81:03:63:1F:C7:D4:36:8C:48:35:4A
authorityKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityInfoAccess
CA Issuers - URI:http://int-r1.certainly.com
subjectAltName
DNS:*.chefkoch.de, DNS:chefkoch.de
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crls.certainly.com/17182262453002514/7.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 3 13:02:04.134 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6C:75:60:30:81:1A:C4:71:28:90:EA:A4: 0B:48:28:FD:3B:B8:19:5A:6F:DA:8E:89:1F:0F:9C:BC: 50:5B:EC:D3:02:21:00:B0:B4:62:1D:4D:AF:DD:73:8F: 23:AA:9F:3B:9B:E7:9A:A7:05:6C:5B:17:61:74:B4:B4: C1:B5:0D:BF:CA:48:C8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 3 13:02:04.351 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6C:58:60:99:B3:7E:58:7C:E3:7A:E0:98: 85:36:75:1C:68:8E:B3:9D:C6:F6:C8:44:7F:00:26:24: DB:37:BA:56:02:20:52:2B:33:8D:E4:12:22:56:AE:E7: 34:4D:D3:42:72:15:7A:A9:89:75:B4:53:01:BA:1C:FE: EA:59:A1:55:0A:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-14T16:48:19+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Certainly CN=Certainly Intermediate R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2022-06-22T00:00:00+00:00
Expires
2032-06-21T23:59:59+00:00
Days remaining
2046
Serial (hex)
11831CDE4CB573E5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FE:C4:1E:32:CA:75:C2:95:A6:24:0F:A6:39:D3:AB:E3:BF:B5:CB:13:1D:66:90:E2:33:1A:17:6B:ED:2E:5B:D2
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt.cer
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.49945.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →