DNS
SSL certificate
TLSv1.3demando.de · 91.213.56.96:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=DE L=Kaiserslautern O=Demando GmbH CN=*.demando.de
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
- Valid from
- 2026-08-31T00:00:00+00:00
- Expires
- 2027-03-17T23:59:59+00:00
- Days remaining
- 175
- Serial (hex)
- 0704C4AD17F0A3499FAF7B98F139ED2F
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:*.demando.de, DNS:demando.de
SHA-256 fingerprint
9E:DA:FF:C7:3A:E3:25:97:91:C1:DE:2C:28:E6:CB:6E:48:59:9C:99:F5:C1:C9:54:44:D2:A0:62:9C:7B:2E:4F
Certificate extensions & PEM
- authorityKeyIdentifier
- A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
- subjectKeyIdentifier
- 98:AA:4A:82:26:08:98:C2:09:9B:22:14:57:2B:C0:E5:F3:83:81:D1
- subjectAltName
- DNS:*.demando.de, DNS:demando.de
- certificatePolicies
- Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
- authorityInfoAccess
- OCSP - URI:http://status.thawte.com CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 31 11:17:09.325 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CD:CF:93:D2:74:42:6C:0F:A9:10:FB: 43:96:78:E6:FA:BA:44:9A:DE:F9:F7:CC:85:BE:E5:1F: B3:87:E1:BC:B8:02:20:7A:62:83:EF:29:BB:90:4E:3B: 64:DF:72:40:9E:69:7E:A6:9D:79:81:EE:71:2C:D6:B1: F6:99:55:26:76:DA:18 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 31 11:17:09.311 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:B0:69:22:C9:31:C7:B3:54:00:F5:39: BC:96:34:51:70:0E:BF:94:EB:A4:20:21:FD:B2:E8:99: B3:DA:32:45:35:02:20:54:9F:B5:90:20:05:71:72:F9: 07:BF:51:38:76:FF:0A:83:9C:D9:91:23:DB:62:A6:93: CC:A4:78:26:F3:76:AC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 31 11:17:09.376 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:20:45:49:4E:6B:D5:9E:DC:78:13:8C: 62:71:61:EC:D9:E9:F2:7E:E4:92:1F:0A:50:E7:CF:25: D1:0F:13:CF:02:21:00:C5:79:12:CA:82:7B:4D:1A:E4: C4:BB:67:56:A2:19:12:36:CF:D5:AE:26:AA:C5:53:2B: 15:5D:05:12:A4:09:7D
-----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIQBwTErRfwo0mfr3uY8TntLzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0yNjA4MzEwMDAwMDBaFw0yNzAzMTcyMzU5NTlaMFQxCzAJBgNVBAYTAkRFMRcw FQYDVQQHEw5LYWlzZXJzbGF1dGVybjEVMBMGA1UEChMMRGVtYW5kbyBHbWJIMRUw EwYDVQQDDAwqLmRlbWFuZG8uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCk+Agv3ghyWCaMav7lwWMjaEJ1bxq56VVYeSkniGWmgcZJ9CaHqcHVpKDO ADAJR/j9o2nOu5iMpzWqJSXG/3j/tM3Ox0toBIkh+r028lU3u9wgHpZ9Se5vnb5S VVRs5qpvkuqxvNgS0M9VfD66uwglVA5t+mSb1RpNdCJQsoLB6u/dx53j3UxZB6AW 6f4PdW0DOemPG2W0GZ5jfy7Wi7a0RpVhXmcvuyIR22DPmVtkKw/dlHw1irmvVF6u yfrdz26807IkkN0yexP2q33Sveh4/7QNPNsZcZIEcyxhiFrBCwwyoEsq0jhbYW+4 3Zf0o9k+EeOE8fcD2b7yRjCm4FZbarBRTjjih3Lu9Jl7hQNl0ISL8FKLgirnB5kP V0ji+7dlC1sf4XbtH8vh7kQWLCZjf2ss7v6ADCAgOEAe+CR0+Mzx5fd+Kew0NqEF GZkPuPEl0X1R5Qw0P8a+CIJg30oJVz72S97qK9Oax8FiftP/jPT5K2MTKHc5nBPc XL8SGzXltnUBeEpZFGzDoFHKEkAXkIqhNIwJQo/5DZfw4fRu8c1HiWaofWqsQomr KcPkYbp9NA51j3QFQCttNCp7yZC6R3EjU/99y4a2svK0KC74CecxjCV8+b5Q4CAi goB+fIurlfocSJvGvbB8TQ151Uc4uPi60lFt6Te33jFGLzBqbwIDAQABo4IDDTCC AwkwHwYDVR0jBBgwFoAUpYz+MszrDyzUGcYIuAAkiF3DxbcwHQYDVR0OBBYEFJiq SoImCJjCCZsiFFcrwOXzg4HRMCMGA1UdEQQcMBqCDCouZGVtYW5kby5kZYIKZGVt YW5kby5kZTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRw Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQM MAoGCCsGAQUFBwMBMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jZHAudGhhd3Rl LmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNybDBwBggrBgEFBQcBAQRkMGIwJAYIKwYB BQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6BggrBgEFBQcwAoYuaHR0 cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNydDAMBgNV HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgBMY9yY5Zwdq4j2 Hoo93q6Pq0SjN3tfm5TD+6Gc/MG+JgAAAaBXiZRNAAAEAwBHMEUCIQDNz5PSdEJs D6kQ+0OWeOb6ukSa3vn3zIW+5R+zh+G8uAIgemKD7ym7kE47ZN9yQJ5pfqadeYHu cSzWsfaZVSZ22hgAdgDW1Y2p0BdT82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAA AaBXiZQ/AAAEAwBHMEUCIQCwaSLJMcezVAD1ObyWNFFwDr+U66QgIf2y6Jmz2jJF NQIgVJ+1kCAFcXL5B79ROHb/CoOc2ZEj22Kmk8ykeCbzdqwAdgBEwr0M6RQOZKXJ SgGTClqhuzWXDgDuERaJaCocRNe1ZgAAAaBXiZSAAAAEAwBHMEUCIGYgRUlOa9We 3HgTjGJxYezZ6fJ+5JIfClDnzyXRDxPPAiEAxXkSyoJ7TRrkxLtnVqIZEjbP1a4m qsVTKxVdBRKkCX0wDQYJKoZIhvcNAQELBQADggEBAFeIrLX9IVs1fnXpu3UR1AWj h7WfyDvtrVLeuvfCvJ6of8n9U+bE7r7YoewhzothmlprVceDxgsa41zzlrz5p42a ubMud+A2JS8dQL+oSZFH4QH89WOB1BVCl11IMwYUVQywWWwHP3Oqg286q69adFPp oVqIOla+iQ52pg9XQUJ2j/VYQbxW2tVKY4jQx291byvkeCb5cquDIPOOlM4t5w52 2xrZrYFPHhjpolukxeHHlnCC0oaF23K4cbvC6Qm8gmvAS6A7wwPUCKPvPZrxLpTb qVoo+L7eS6zacxG5t2W4fHIMXP91XPUuR5p38QtcvGh2BuvJbPaAKblJxrEXJ+k= -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-23T07:21:16+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=US O=DigiCert Inc OU=www.digicert.com CN=Thawte TLS RSA CA G1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Valid from
- 2017-11-02T12:24:25+00:00
- Expires
- 2027-11-02T12:24:25+00:00
- Days remaining
- 405
- Serial (hex)
- 090EE8C5DE5BFA62D2AE2FF7097C4857
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2
Certificate extensions & PEM
- subjectKeyIdentifier
- A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
- authorityKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
- certificatePolicies
- Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE----- MIIEizCCA3OgAwIBAgIQCQ7oxd5b+mLSri/3CXxIVzANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjI0MjVaFw0yNzExMDIxMjI0MjVaMF4xCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHTAbBgNVBAMTFFRoYXd0ZSBUTFMgUlNBIENBIEcxMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxjngmPhVetC0b/ozbYJdzOBUA1sMog47030cAP+P 23ANUN8grXECL8NhDEF4F1R9tL0wY0mczHaR0a7lYanlxtwWo1s2uGnnyDs6mOCs 66ew2w3YETr6Tb14xgjpu1gGFtAeewaikO9Fud8hxGJTSwn8xeNkfKVWpD2L4vFN 36FNgxeilK6aE4ykgGAzNlokTp6hNOLAYpDySdLAPKzuJSQ7JCEZ6O+SDKywIdXL oMTnpxuBKGSG88NWTo3CHCOGmQECia2yqdPDjgLqnEiYNjwQL8uMqj8rOvlMgviB cHA7xty+7/uYLN6ZS7Vq1/F/lVhVOf5ej6jZdmB85szFbQIDAQABo4IBQDCCATww HQYDVR0OBBYEFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB8GA1UdIwQYMBaAFE4iVCAY lebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQo MCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8E OzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxSb290RzIuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQC6 km0KA4sTb2VYpEBm/uL2HL/pZX9B7L/hbJ4NcoBe7V56oCnt7aeIo8sMjCRWTCWZ D1dY0+2KZOC1dKj8d1VXXAtnjytDDuPPf6/iow0mYQTO/GAg/MLyL6CDm3FzDB8V tsH/aeMgP6pgD1XQqz+haDnfnJTKBuxhcpnx3Adbleue/QnPf1hHYa8L+Rv8Pi5U h4V9FwHOfphdMXOxi14OqmsiTbc5cOs9/uukH+YVsuFdWTna6IVw1qh+tEtyH16R vmi7pkqyZYULOPMIE7avrljVVBZuikwARtY8tCVV6Pp9l3VeagBqb2ffgqNJt3C0 TYNYQI+BXG1R1cABlold -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.