DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

cmegroup.com · 23.42.161.133:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=Illinois L=Chicago O=CME Group Inc. CN=cmegroup.com
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-07-17T00:00:00+00:00
Expires
2027-01-31T23:59:59+00:00
Days remaining
79
Serial (hex)
09A41B74862D0DC2F930E89D9AA7E23A
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:cmegroup.com, DNS:www.cmegroup.com

SHA-256 fingerprint

00:40:11:3E:E5:44:3B:C0:F2:10:0D:6E:62:CB:F3:03:93:AD:CB:8D:80:A0:CE:C3:84:71:FC:0B:BA:99:CF:6E
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
1A:67:E7:F5:99:14:CC:CC:AD:3B:D8:D4:D6:D3:F4:C3:62:0B:E5:8F
subjectAltName
DNS:cmegroup.com, DNS:www.cmegroup.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jul 17 00:13:55.173 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:9C:60:16:A9:5C:57:C7:97:D6:F0:8C: 44:EE:A6:60:2F:04:21:4D:FE:33:C1:C3:CC:E9:37:97: D9:A9:05:9E:A3:02:21:00:DA:81:1D:1D:57:5A:58:8E: 8A:EB:D4:26:25:D1:6D:43:99:D6:B9:82:15:E3:6E:B0: CC:D0:5A:50:18:22:41:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 17 00:13:55.219 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A0:68:1A:73:4E:B0:C2:6F:F3:12:B4: D5:80:84:6B:9F:11:1D:6A:12:02:91:2C:EE:15:7D:B1: B5:32:18:55:18:02:20:02:3C:DD:9E:B5:D1:BE:8B:06: 6C:99:A0:BA:15:D5:3B:EE:AD:4F:7A:5F:58:C3:A1:18: 67:32:FC:E3:B4:8F:AE Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jul 17 00:13:55.255 2026 GMT Extensions: 00:00:05:00:06:3D:DB:07 Signature : ecdsa-with-SHA256 30:45:02:20:38:53:BE:5C:1A:32:A2:5B:67:9E:06:73: 0C:CA:68:D9:D5:E6:E0:19:01:59:AD:BA:21:64:97:53: 59:91:2E:AC:02:21:00:B4:9A:CB:A4:56:08:34:6A:AB: E4:EB:84:5C:FC:DF:DA:7A:C5:03:74:9C:28:3D:11:EE: 72:93:AD:28:15:8B:B6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-13T20:16:11+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1612
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →