DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

diamond.ac.uk · 104.18.24.17:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=GB ST=Oxfordshire L=Didcot O=Diamond Light Source Limited CN=www.diamond.ac.uk
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2025-12-01T13:36:09+00:00
Expires
2027-01-02T13:36:08+00:00
Days remaining
88
Serial (hex)
79C4F7DF2615D2A3574776AB
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.diamond.ac.uk, DNS:diamond.ac.uk

SHA-256 fingerprint

35:5B:54:68:39:2A:45:82:21:C6:88:52:B2:E0:0D:94:11:EF:B0:92:C7:CC:29:2C:C6:E5:82:E7:EC:14:94:A1
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsrsaovsslca2018.crl
subjectAltName
DNS:www.diamond.ac.uk, DNS:diamond.ac.uk
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
69:B0:33:C3:6E:6B:7B:3F:CB:1F:B4:C0:BA:87:81:E5:63:D2:33:ED
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Dec 1 13:36:13.650 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:09:3C:9E:59:23:33:72:59:6E:F2:49:31: 6D:1E:CF:55:E7:BB:DA:0A:C5:90:EA:60:98:40:4B:66: 48:66:50:99:02:21:00:84:8B:85:1D:F4:1F:08:59:30: E2:2C:76:B3:B2:7C:B1:EA:1C:4C:19:4F:27:A0:42:65: 40:07:E4:57:5F:AC:97 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Dec 1 13:36:13.268 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:92:1C:0D:88:24:40:EF:2C:38:EF:D0: E1:3D:77:70:CA:4E:01:6A:7D:7C:38:47:8C:0F:29:13: AF:E0:01:EB:EE:02:20:2A:F9:8E:F1:7E:AB:75:20:CA: 45:5A:1E:7F:6F:82:9B:22:64:7E:25:84:24:21:1C:00: 9E:A8:12:C9:63:CB:AF Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Dec 1 13:36:13.590 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:10:47:BC:BC:E1:23:D6:39:05:50:29:5B: F7:68:01:8C:5C:56:47:2D:02:37:2C:34:B2:2B:CA:6E: 21:75:6C:46:02:20:5C:14:F4:70:22:60:DB:55:BB:59: 2E:61:4E:30:A1:4D:06:68:A6:F9:69:57:D3:52:60:B3: 91:D5:01:30:79:E3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-05T17:51:01+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
777
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2018-09-19T00:00:00+00:00
Expires
2028-01-28T12:00:00+00:00
Days remaining
479
Serial (hex)
01EE5F169DFF97352B6465D66A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

44:5E:EC:78:BC:61:21:50:44:A0:37:96:56:AA:2D:5D:B5:E4:2F:76:CB:70:B8:D1:4C:20:77:AA:94:3D:4E:BB
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →