DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dns.lu · 158.64.1.65:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=LU L=Esch-sur-Alzette O=Fondation Restena CN=www.dns.lu
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
Valid from
2026-07-22T14:21:22+00:00
Expires
2027-02-06T14:21:21+00:00
Days remaining
136
Serial (hex)
257A8CC7284556A25D34C46E46ED90D2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.dns.lu, DNS:dns.lu, DNS:auth.dns.lu, DNS:idp.dns.lu, DNS:nic.lu, DNS:www.lunic.lu, DNS:lunic.lu, DNS:www.nic.lu

SHA-256 fingerprint

A0:35:47:B5:E5:4A:12:B8:AF:BA:E0:10:60:3E:B2:AA:2C:3D:4B:D7:10:48:01:51:24:A1:1B:55:AE:40:2B:96
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer
subjectAltName
DNS:www.dns.lu, DNS:dns.lu, DNS:auth.dns.lu, DNS:idp.dns.lu, DNS:nic.lu, DNS:www.lunic.lu, DNS:lunic.lu, DNS:www.nic.lu
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
subjectKeyIdentifier
10:AF:10:F9:46:59:BC:63:A7:9A:F0:41:DF:74:63:9F:A2:21:A2:6B
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jul 22 14:31:24.122 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:70:8F:99:0F:32:F1:5C:EC:70:C9:EF:DE: 53:2D:BD:23:06:60:3C:D4:35:D4:B9:1B:6A:75:1D:9D: 15:CB:26:7E:02:21:00:90:70:76:D8:00:4D:59:53:E4: EF:88:F4:CF:40:A3:D3:A3:51:FE:61:ED:C9:67:F2:DD: 66:A5:AE:D1:90:34:18 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 22 14:31:24.149 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4A:25:83:50:B7:31:CF:17:26:02:FF:81: 47:12:CD:24:F4:7A:CA:4B:2C:7F:0C:38:F3:ED:6F:22: 39:4D:0F:B8:02:20:3E:4F:5F:F0:5B:6B:01:A9:01:26: A7:90:57:F2:60:32:F5:9F:60:4F:43:0D:0E:5B:91:D6: 15:8A:73:62:B5:6C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 22 14:31:24.099 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:44:26:3B:78:D8:96:22:54:59:72:B4:D4: 39:9A:A8:69:98:61:C5:4F:97:59:DC:68:66:7E:E6:2E: F8:9E:50:07:02:21:00:93:19:57:4E:17:0D:AB:A2:64: 9F:A5:AE:D7:96:B0:68:61:59:CD:6D:DA:EC:8F:33:90: D1:44:87:4B:83:68:8D
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T16:43:35+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
Valid from
2025-01-03T11:15:00+00:00
Expires
2039-12-31T11:14:59+00:00
Days remaining
4847
Serial (hex)
14D57BF3692228219A5567FA91651B22
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

5B:67:8D:C4:40:95:A5:28:95:B6:3B:31:F2:72:27:F4:B3:6C:3E:34:74:91:BF:2B:FA:69:18:37:A5:FB:8C:79
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
subjectKeyIdentifier
86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
Issuer
C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions RootCA 2015
Valid from
2021-09-02T07:41:55+00:00
Expires
2029-08-31T07:41:54+00:00
Days remaining
1073
Serial (hex)
2A6086D4D4DE45C95E4B98FBBF2FBF26
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4A:CD:8D:C6:02:0A:54:5A:85:89:43:A5:53:B5:E0:F3:FC:5B:85:9A:EA:17:46:65:0D:69:CF:12:10:F9:56:D8
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
71:15:67:C8:C8:C9:BD:75:5D:72:D0:38:18:6A:9D:F3:71:24:54:0B
authorityInfoAccess
CA Issuers - URI:http://repo.harica.gr/certs/HaricaRootCA2015.crt
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HaricaRootCA2015.crl
subjectKeyIdentifier
0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →