DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dns-a.serve-u.de · 185.240.52.31:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=*.fmt32.net
Issuer
C=US O=Let's Encrypt CN=E8
Valid from
2026-02-11T23:02:51+00:00
Expires
2026-05-12T23:02:50+00:00
Days remaining
-153
Serial (hex)
055421CF23EA615E1FF7096BBA7EE8FC220A
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:*.fmt32.net, DNS:fmt32.net

SHA-256 fingerprint

B8:2E:9B:D1:21:38:CB:A5:CA:2A:29:95:B0:61:75:6F:44:1D:5E:F4:C9:83:F2:0A:81:3B:8C:BB:88:95:AE:CD
Certificate extensions & PEM
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
CD:1B:57:70:B8:93:63:3C:0A:66:EF:A2:7A:1F:29:EA:56:0A:D7:49
authorityKeyIdentifier
8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA
authorityInfoAccess
CA Issuers - URI:http://e8.i.lencr.org/
subjectAltName
DNS:*.fmt32.net, DNS:fmt32.net
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://e8.c.lencr.org/11.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A5:C9:78:92:5D:57:46:17:82:87:0D:D8:89:66:0B:5C: 55:64:8B:7D:00:40:F2:EC:07:68:51:D1:88:69:19:F7 Timestamp : Feb 12 00:01:22.285 2026 GMT Extensions: 00:00:05:00:31:EA:CE:B4 Signature : ecdsa-with-SHA256 30:45:02:21:00:87:73:9C:4E:33:50:D6:7C:88:4F:1B: 9E:1A:A4:A6:9B:FA:79:56:EB:88:37:C9:D0:BE:99:C8: C2:1E:E5:4E:DB:02:20:6B:64:B9:2A:43:58:E3:D2:79: D7:8F:05:3E:71:EC:DC:59:8A:BB:DE:44:B2:FF:12:56: C4:F0:61:4E:37:F3:DB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D1:6E:A9:A5:68:07:7E:66:35:A0:3F:37:A5:DD:BC:03: A5:3C:41:12:14:D4:88:18:F5:E9:31:B3:23:CB:95:04 Timestamp : Feb 12 00:01:24.170 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F6:B0:80:8E:FA:96:CF:5F:2B:95:1C: 5B:49:3C:25:B9:76:C7:CF:51:6E:FD:52:45:DB:CA:5B: 7B:7C:5D:13:03:02:21:00:B8:9B:26:FB:93:89:22:35: BF:77:A8:87:99:B8:FF:9C:65:1E:48:FC:F5:6B:37:48: C2:FE:32:F4:9B:91:14:D5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-12T06:00:36+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Let's Encrypt CN=E8
Issuer
C=US O=Internet Security Research Group CN=ISRG Root X1
Valid from
2024-03-13T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
151
Serial (hex)
63959363C24E7082715918BFC3D7ED56
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

83:62:4F:D3:38:C8:D9:B0:23:C1:8A:67:CB:7A:9C:05:19:DA:43:D1:17:75:B4:C6:CB:DA:D4:5C:3D:99:7C:52
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA
authorityKeyIdentifier
79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
authorityInfoAccess
CA Issuers - URI:http://x1.i.lencr.org/
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://x1.c.lencr.org/ 
-----BEGIN CERTIFICATE-----
MIIEVjCCAj6gAwIBAgIQY5WTY8JOcIJxWRi/w9ftVjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy
Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa
Fw0yNzAzMTIyMzU5NTlaMDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF
bmNyeXB0MQswCQYDVQQDEwJFODB2MBAGByqGSM49AgEGBSuBBAAiA2IABNFl8l7c
S7QMApzSsvru6WyrOq44ofTUOTIzxULUzDMMNMchIJBwXOhiLxxxs0LXeb5GDcHb
R6EToMffgSZjO9SNHfY9gjMy9vQr5/WWOrQTZxh7az6NSNnq3u2ubT6HTKOB+DCB
9TAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB
MBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFI8NE6L2Ln7RUGwzGDhdWY4j
cpHKMB8GA1UdIwQYMBaAFHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEB
BCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzATBgNVHSAE
DDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veDEuYy5sZW5j
ci5vcmcvMA0GCSqGSIb3DQEBCwUAA4ICAQBnE0hGINKsCYWi0Xx1ygxD5qihEjZ0
RI3tTZz1wuATH3ZwYPIp97kWEayanD1j0cDhIYzy4CkDo2jB8D5t0a6zZWzlr98d
AQFNh8uKJkIHdLShy+nUyeZxc5bNeMp1Lu0gSzE4McqfmNMvIpeiwWSYO9w82Ob8
otvXcO2JUYi3svHIWRm3+707DUbL51XMcY2iZdlCq4Wa9nbuk3WTU4gr6LY8MzVA
aDQG2+4U3eJ6qUF10bBnR1uuVyDYs9RhrwucRVnfuDj29CMLTsplM5f5wSV5hUpm
Uwp/vV7M4w4aGunt74koX71n4EdagCsL/Yk5+mAQU0+tue0JOfAV/R6t1k+Xk9s2
HMQFeoxppfzAVC04FdG9M+AC2JWxmFSt6BCuh3CEey3fE52Qrj9YM75rtvIjsm/1
Hl+u//Wqxnu1ZQ4jpa+VpuZiGOlWrqSP9eogdOhCGisnyewWJwRQOqK16wiGyZeR
xs/Bekw65vwSIaVkBruPiTfMOo0Zh4gVa8/qJgMbJbyrwwG97z/PRgmLKCDl8z3d
tA0Z7qq7fta0Gl24uyuB05dqI5J1LvAzKuWdIjT1tP8qCoxSE/xpix8hX2dt3h+/
jujUgFPFZ0EVZ0xSyBNRF3MboGZnYXFUxpNjTWPKpagDHJQmqrAcDmWJnMsFY3jS
u1igv3OefnWjSQ==
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →