DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

db.com · 34.120.22.144:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=DE jurisdictionST=Hessen jurisdictionL=Frankfurt am Main businessCategory=Private Organization serialNumber=HRB 30000 C=DE ST=Hessen L=Frankfurt am Main postalCode=60325 street=Taunusanlage 12 O=DEUTSCHE BANK AG CN=www.db.com
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2026-08-13T00:00:00+00:00
Expires
2027-02-27T23:59:59+00:00
Days remaining
129
Serial (hex)
0871098DA64B1933A246898A01BF7189
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.db.com, DNS:db.com

SHA-256 fingerprint

C1:01:B6:6F:ED:63:17:87:3E:25:05:3B:96:B3:0D:61:15:DD:BC:7D:E2:0C:FA:BA:C0:AC:47:64:48:7D:82:F1
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
97:C7:55:DD:7F:A7:B1:0D:D9:AF:A9:2E:33:89:1A:C8:B0:48:21:8D
subjectAltName
DNS:www.db.com, DNS:db.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 13 06:44:46.205 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:23:DA:FE:4F:97:E8:05:95:BB:40:2B:6F: E6:BA:D3:E5:8C:8A:0D:D8:E0:E5:C9:1C:26:B7:CE:1E: 74:2B:E1:75:02:21:00:B6:9A:5C:97:02:63:47:B0:B4: 56:38:E7:71:0A:50:E1:C3:48:07:D0:CE:36:FA:52:08: 55:1A:1A:0D:34:0E:EC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 13 06:44:46.268 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:82:58:51:69:E5:4A:B8:26:1B:05:7B: 43:BD:72:9E:D1:BB:8D:F2:18:89:3C:9C:AC:42:BB:9B: 00:85:42:FD:8D:02:20:1E:58:F8:F6:4A:6E:5C:80:96: 15:AD:DC:DE:59:6A:42:66:1E:6F:82:F7:03:12:C2:3A: 06:1E:67:FA:97:1C:49 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 13 06:44:46.339 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:55:19:C6:B8:A2:3B:48:1F:D8:A0:57:A5: 52:9C:8B:82:D0:28:F3:FC:59:C3:6E:C8:35:8A:7C:18: 7F:AF:8F:87:02:20:02:66:71:DC:E0:FF:4B:11:CD:9D: 1C:92:BD:DB:C3:DC:5B:E6:DE:B9:9B:71:96:D3:8E:49: 5C:23:66:27:C0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-21T17:33:17+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1349
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →