THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dictu.nl · 93.92.103.84:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL L=Den Haag O=Dienst ICT Uitvoering CN=www.dictu.nl
Issuer
C=IE O=DigiCert Ireland Limited CN=DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
Valid from
2025-11-18T00:00:00+00:00
Expires
2026-11-17T23:59:59+00:00
Days remaining
43
Serial (hex)
01DF8C3FE8C115543AFA75617807A2D4
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.dictu.nl, DNS:dictu.nl, DNS:prod.dictu.nl, DNS:inkoopplein.dictu.nl, DNS:werkenbijdictu.nl, DNS:www.werkenbijdictu.nl

SHA-256 fingerprint

84:9E:77:1E:27:B2:9D:00:C2:11:0F:C7:90:51:06:D6:1F:1F:A4:51:6A:96:C3:CD:F0:BE:DB:2D:7C:A1:4A:9C
Certificate extensions & PEM
authorityKeyIdentifier
18:89:E7:AF:F0:28:F6:7C:CA:68:05:52:E1:62:D8:91:D6:16:65:60
subjectKeyIdentifier
0E:63:7C:F1:1F:9B:60:BA:D9:4D:9B:02:B8:88:A4:0F:7D:91:4A:31
subjectAltName
DNS:www.dictu.nl, DNS:dictu.nl, DNS:prod.dictu.nl, DNS:inkoopplein.dictu.nl, DNS:werkenbijdictu.nl, DNS:www.werkenbijdictu.nl
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.eu CA Issuers - URI:http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 18 15:02:56.627 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D1:49:66:45:31:FA:D9:9E:C1:62:BC: 6A:AC:78:C6:FD:FE:D6:B4:B9:19:2B:4F:B3:75:72:58: CA:A5:22:21:52:02:21:00:A3:FA:9E:02:44:D3:F4:9E: B4:D8:A5:23:40:48:2D:00:98:0C:6B:C3:F0:A8:DA:9B: 97:D1:22:C4:3B:9A:3C:E0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Nov 18 15:02:56.698 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:69:95:BE:2A:90:D9:BE:70:09:01:68:04: C4:8B:48:C0:55:C4:16:32:A0:62:58:9D:D6:CA:8F:A6: AA:FA:60:EB:02:20:43:32:0F:8E:33:7C:70:B1:5D:F6: 76:FE:96:A6:48:8C:04:71:5A:FF:C8:CB:4A:60:3B:91: C9:31:4C:91:E2:E0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 18 15:02:56.599 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:16:BD:6E:D3:29:08:92:B9:B8:CF:E6:AF: 64:33:7F:F4:97:42:52:52:0D:2E:C8:20:C8:D2:C5:27: BF:1A:03:64:02:21:00:ED:26:B0:CB:88:C9:5A:12:10: F8:09:41:E9:55:87:44:15:95:45:40:C5:E5:1C:A8:91: CA:96:0F:BF:5C:E6:A6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-05T22:56:11+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=IE O=DigiCert Ireland Limited CN=DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-09-19T00:00:00+00:00
Expires
2032-09-18T23:59:59+00:00
Days remaining
2175
Serial (hex)
064F84FF791FA676F29CF36537A2749E
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A4:AD:FC:29:17:BB:14:51:D3:12:37:1D:44:1A:CD:B6:86:10:7F:BC:0B:31:56:D5:57:0E:99:E1:12:19:74:FA
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
18:89:E7:AF:F0:28:F6:7C:CA:68:05:52:E1:62:D8:91:D6:16:65:60
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →