DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

cmbchina.com · 116.7.243.51:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=Guangdong Province L=Shenzhen O=China Merchants Bank Co., Ltd CN=*.cmbchina.com
Issuer
C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
Valid from
2026-08-12T00:00:00+00:00
Expires
2027-02-26T23:59:59+00:00
Days remaining
108
Serial (hex)
08440C8E5A3C547495A1A41003EDB5F3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.cmbchina.com, DNS:cmbchina.com

SHA-256 fingerprint

96:37:68:93:BF:CD:B8:BB:28:6E:8B:DE:86:FD:ED:6A:AF:53:31:A2:1E:E7:0F:35:25:ED:22:8F:8A:8A:39:B9
Certificate extensions & PEM
authorityKeyIdentifier
41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
subjectKeyIdentifier
17:C7:8B:C8:7A:69:CE:60:7D:A3:5A:8F:BA:26:4C:F6:2E:DE:B6:EB
subjectAltName
DNS:*.cmbchina.com, DNS:cmbchina.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 12 00:46:57.913 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:07:48:3B:B5:E1:BB:29:C7:E4:4E:C8:EE: 82:8F:5A:6C:1D:E9:46:CC:97:0A:A7:E7:75:2E:5A:BE: BC:2C:FA:87:02:21:00:8C:78:13:73:A9:29:B3:A7:23: CA:EF:B5:98:CF:21:0E:00:D3:E8:54:2A:65:20:82:B2: F6:27:BB:67:73:34:83 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 12 00:46:57.981 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:35:E1:D1:A1:20:81:5D:FC:DD:D8:E6:B7: 62:36:69:09:CC:D3:AA:53:B5:E4:A0:14:1D:A4:C9:F7: 80:DD:06:45:02:21:00:DE:EA:20:AE:A2:57:2D:5E:AC: 9C:0A:51:9E:6C:BC:D8:EB:48:03:9B:D1:B9:6A:1C:86: DB:52:38:E1:96:3B:F7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 12 00:46:58.015 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3C:18:F9:F0:41:0C:60:62:45:27:C1:47: D2:A0:5B:2B:7D:AD:DF:42:69:66:04:33:FA:ED:19:A2: C1:2A:FF:B7:02:21:00:E1:D5:84:72:25:E5:DF:2E:CD: B6:EE:09:56:43:78:B6:31:0E:26:6F:9C:AB:36:91:13: 95:DB:56:75:67:BC:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-10T05:07:55+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-12-15T00:00:00+00:00
Expires
2032-12-14T23:59:59+00:00
Days remaining
2226
Serial (hex)
0F06BB09306148267FCA1B71C1DB807D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:DC:9E:DC:0F:DD:FA:97:5A:14:32:EF:80:6E:C7:80:07:8B:53:62:AD:45:AF:76:DB:15:C9:07:63:0D:B2:5D
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
Valid from
2024-01-18T00:00:00+00:00
Expires
2031-11-09T23:59:59+00:00
Days remaining
1825
Serial (hex)
0FE032AB844D033106C50C8E13C8B068
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
authorityKeyIdentifier
03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →