DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dtag.de · 80.158.66.24:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate subjectAltName did not match expected name `dtag.de'

Certificate verification failed

Subject
CN=ebs08.telekom.de
Issuer
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security DV ECC CA 24
Valid from
2026-11-04T05:05:46+00:00
Expires
2027-02-02T23:59:59+00:00
Days remaining
88
Serial (hex)
22D065DF28BE1488121BA797A8F7F1D1
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:ebs08.telekom.de

SHA-256 fingerprint

2A:25:58:39:63:2C:2C:49:BE:26:5E:46:51:A1:1E:17:00:99:D7:19:E4:B5:92:A1:96:E4:A9:B8:79:F0:F9:38
Certificate extensions & PEM
authorityKeyIdentifier
2D:7F:67:24:41:47:F5:30:EE:10:2C:3C:D0:55:F4:70:44:37:C1:87
subjectKeyIdentifier
8C:63:8E:20:9D:1A:E4:5C:9A:98:EB:D0:11:CC:61:BC:5F:A4:8A:E8
keyUsage
Digital Signature
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://docs.serverid.telesec.de/cps/serverid.htm
crlDistributionPoints
Full Name: URI:http://crl.serverid.telesec.de/rl/Telekom_Security_DV_ECC_CA_24.crl
authorityInfoAccess
OCSP - URI:http://ocsp.serverid.telesec.de/ocspr CA Issuers - URI:http://crt.serverid.telesec.de/crt/Telekom_Security_DV_ECC_CA_24.crt
basicConstraints
CA:FALSE
subjectAltName
DNS:ebs08.telekom.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Nov 4 05:05:47.815 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:34:EC:05:3F:85:39:FB:2B:58:21:52:97: 1D:5A:46:0D:5E:9D:5C:DD:53:5F:20:7F:B5:91:3E:81: 59:A2:AB:1C:02:21:00:8C:71:C7:77:AB:0F:2F:66:8D: E5:5C:E8:EA:6C:82:28:74:B9:BE:83:A1:09:A7:79:E8: C9:1E:3C:07:04:80:2E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:8B:9D:6B:8D:D7:91:D1:CD:05:49:ED:B6:03:55:D6: 06:B6:4F:AD:30:DB:71:FE:78:8F:0F:C7:C8:FB:C4:B1 Timestamp : Nov 4 05:05:48.989 2026 GMT Extensions: 00:00:05:00:12:83:72:CD Signature : ecdsa-with-SHA256 30:46:02:21:00:AE:C3:8A:93:7F:69:CA:8D:81:0F:7F: 68:FC:F6:AB:24:37:B7:2F:AF:43:3C:44:7C:D7:3A:E3: A2:92:0B:2A:1C:02:21:00:DB:0A:16:9F:70:80:D1:83: 16:26:F4:AD:A3:8C:3B:3E:3F:FE:FE:5A:49:59:BE:9D: 0D:12:A9:2B:F7:38:D7:57 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Nov 4 05:05:48.148 2026 GMT Extensions: 00:00:05:00:37:BA:A7:DF Signature : ecdsa-with-SHA256 30:44:02:20:06:2F:53:7B:EB:63:41:63:F2:28:95:D2: E3:28:02:AD:F1:F3:CE:1C:B5:1F:AB:70:A2:69:52:CE: CD:AD:B6:18:02:20:4B:A1:08:B7:49:3A:55:5D:25:B8: 0B:BC:A4:ED:55:01:CC:D8:3D:17:E2:F0:35:B2:92:B0: E7:35:C1:E3:16:8D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Nov 4 05:05:48.050 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F9:3F:BD:38:53:2A:10:9A:04:E1:08: 5B:3E:BE:40:71:A2:E2:4B:37:32:37:7C:38:8B:48:01: 6C:8E:99:78:D3:02:20:5D:50:5F:FF:31:15:82:49:E3: C6:FD:22:35:F9:E0:98:69:4A:06:22:55:20:D5:D8:42: D2:8B:3E:97:16:BD:8A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Nov 4 05:05:47.844 2026 GMT Extensions: 00:00:05:00:1B:EF:77:58 Signature : ecdsa-with-SHA256 30:44:02:20:08:BA:6C:E0:B4:17:E5:30:9B:F5:F9:09: 53:FB:42:50:16:03:12:7B:43:61:E6:9F:BF:CF:87:46: 1C:13:09:4E:02:20:26:86:6C:14:88:76:F7:81:E3:8A: ED:07:09:84:0D:15:52:AB:F7:19:A9:C0:06:05:EC:36: 80:D7:F5:FA:9F:2C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Nov 4 05:05:48.061 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:E3:D4:94:8F:0E:7A:D2:D1:86:47:2A: 17:C9:C3:7E:17:66:7F:58:9A:AE:2C:D2:2F:5F:0A:07: F9:DE:EB:D7:73:02:20:71:A8:65:A5:30:48:B4:C1:DF: 21:DA:24:A3:EE:4B:CB:7B:17:98:FB:82:57:20:ED:75: 49:3D:87:5B:B3:B2:BA
-----BEGIN CERTIFICATE-----
MIIGcTCCBfegAwIBAgIQItBl3yi+FIgSG6eXqPfx0TAKBggqhkjOPQQDAzBeMQsw
CQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0eSBH
bWJIMSYwJAYDVQQDDB1UZWxla29tIFNlY3VyaXR5IERWIEVDQyBDQSAyNDAeFw0y
NjExMDQwNTA1NDZaFw0yNzAyMDIyMzU5NTlaMBsxGTAXBgNVBAMTEGViczA4LnRl
bGVrb20uZGUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATU1hxFHbB2hhHDYBel
Kcu8gtt2pCD5rdE2YAVZYuT9yKWpI8GqNkIJTaZD0/4an4ziBaJgjon+YvzJHgX5
MiHmo4IE2DCCBNQwHwYDVR0jBBgwFoAULX9nJEFH9TDuECw80FX0cEQ3wYcwHQYD
VR0OBBYEFIxjjiCdGuRcmpjr0BHMYbxfpIroMA4GA1UdDwEB/wQEAwIHgDATBgNV
HSUEDDAKBggrBgEFBQcDATBTBgNVHSAETDBKMEgGBmeBDAECATA+MDwGCCsGAQUF
BwIBFjBodHRwOi8vZG9jcy5zZXJ2ZXJpZC50ZWxlc2VjLmRlL2Nwcy9zZXJ2ZXJp
ZC5odG0wVAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZXJ2ZXJpZC50ZWxl
c2VjLmRlL3JsL1RlbGVrb21fU2VjdXJpdHlfRFZfRUNDX0NBXzI0LmNybDCBlQYI
KwYBBQUHAQEEgYgwgYUwMQYIKwYBBQUHMAGGJWh0dHA6Ly9vY3NwLnNlcnZlcmlk
LnRlbGVzZWMuZGUvb2NzcHIwUAYIKwYBBQUHMAKGRGh0dHA6Ly9jcnQuc2VydmVy
aWQudGVsZXNlYy5kZS9jcnQvVGVsZWtvbV9TZWN1cml0eV9EVl9FQ0NfQ0FfMjQu
Y3J0MAwGA1UdEwEB/wQCMAAwGwYDVR0RBBQwEoIQZWJzMDgudGVsZWtvbS5kZTCC
Av0GCisGAQQB1nkCBAIEggLtBIIC6QLnAHYARMK9DOkUDmSlyUoBkwpaobs1lw4A
7hEWiWgqHETXtWYAAAGhpPLzJwAABAMARzBFAiA07AU/hTn7K1ghUpcdWkYNXp1c
3VNfIH+1kT6BWaKrHAIhAIxxx3erDy9mjeVc6Opsgih0ub6DoQmneejJHjwHBIAu
AH8AGouda43XkdHNBUnttgNV1ga2T60w23H+eI8Px8j7xLEAAAGhpPL3vQAIAAAF
ABKDcs0EAwBIMEYCIQCuw4qTf2nKjYEPf2j89qskN7cvr0M8RHzXOuOikgsqHAIh
ANsKFp9wgNGDFib0raOMOz4//v5aSVm+nQ0SqSv3ONdXAH0AjspHC6zeavOiBrCk
eoS3Rv4fxr+VPiXmm07kAkjzxugAAAGhpPL0dAAIAAAFADe6p98EAwBGMEQCIAYv
U3vrY0Fj8iiV0uMoAq3x884ctR+rcKJpUs7NrbYYAiBLoQi3STpVXSW4C7yk7VUB
zNg9F+LwNbKSsOc1weMWjQB2AEaiOWfGDbZGh8ZvPfmZlHaTpqYRIIRX1VXn49Ch
2bZGAAABoaTy9BIAAAQDAEcwRQIhAPk/vThTKhCaBOEIWz6+QHGi4ks3Mjd8OItI
AWyOmXjTAiBdUF//MRWCSePG/SI1+eCYaUoGIlUg1dhC0os+lxa9igB9AFlubDOG
lLJZcqJWyKDo3ZBKdugIPdqHOwEIOCgUPO5ZAAABoaTy80QACAAABQAb73dYBAMA
RjBEAiAIumzgtBflMJv1+QlT+0JQFgMSe0Nh5p+/z4dGHBMJTgIgJoZsFIh294Hj
iu0HCYQNFVKr9xmpwAYF7DaA1/X6nywAdgBgTJqven93XwHUBvySDciZ6wscffjJ
Uhv6+hd3O5eLyQAAAaGk8vQdAAAEAwBHMEUCIQDj1JSPDnrS0YZHKhfJw34XZn9Y
mq4s0i9fCgf53uvXcwIgcahlpTBItMHfIdoko+5Ly3sXmPuCVyDtdUk9h1uzsrow
CgYIKoZIzj0EAwMDaAAwZQIxAIg8nrkHPIkfzAQa5GsfrqBrmi2AG1GerTSWiTth
9NCsmEmbzUwyECM3AQ8QJA5fUAIwATR8M6rfDvMQ9vacjwCVRqbBO2lN1jeTVFLN
8F+6aI5m3XbULsJYlDD+9nsSOR5K
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-06T17:15:30+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security DV ECC CA 24
Issuer
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security TLS ECC Root 2020
Valid from
2024-11-26T10:52:56+00:00
Expires
2034-11-25T23:59:59+00:00
Days remaining
2941
Serial (hex)
37A66133041AD4A8F94DB9B77FBB9C71
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:8C:27:5E:88:EB:B3:82:EE:D0:AC:7D:8F:AD:62:A8:D0:C7:D0:73:1D:63:A9:CA:31:A6:7B:6B:15:25:E2:28
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
2D:7F:67:24:41:47:F5:30:EE:10:2C:3C:D0:55:F4:70:44:37:C1:87
authorityKeyIdentifier
E3:72:CC:6E:95:99:47:B1:E6:B3:61:4C:D1:CB:AB:E3:BA:CD:DE:9F
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://tstlser20.crl.telesec.de/rl/Telekom_Security_TLS_ECC_Root_2020.crl
authorityInfoAccess
OCSP - URI:http://tstlser20.ocsp.telesec.de/ocspr CA Issuers - URI:http://tstlser20.crt.telesec.de/crt/Telekom_Security_TLS_ECC_Root_2020.crt
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----
MIIDizCCAxGgAwIBAgIQN6ZhMwQa1Kj5Tbm3f7uccTAKBggqhkjOPQQDAzBjMQsw
CQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0eSBH
bWJIMSswKQYDVQQDDCJUZWxla29tIFNlY3VyaXR5IFRMUyBFQ0MgUm9vdCAyMDIw
MB4XDTI0MTEyNjEwNTI1NloXDTM0MTEyNTIzNTk1OVowXjELMAkGA1UEBhMCREUx
JzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20gU2VjdXJpdHkgR21iSDEmMCQGA1UE
AwwdVGVsZWtvbSBTZWN1cml0eSBEViBFQ0MgQ0EgMjQwdjAQBgcqhkjOPQIBBgUr
gQQAIgNiAAQXrQKQVxgImD0qNpMm2mFRtSkP+tOO0yV3PrqhxUVUvyQMm3LMWof1
ZW3ZkmFH3biiVvB1io0wRgn2LJcSp/dLnjDRY9cmpVYmooRKXu5PwP8l51Pjcobk
SdmCr21Js2OjggGNMIIBiTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFC1/ZyRB
R/Uw7hAsPNBV9HBEN8GHMB8GA1UdIwQYMBaAFONyzG6VmUex5rNhTNHLq+O6zd6f
MBIGA1UdEwEB/wQIMAYBAf8CAQAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwWgYDVR0f
BFMwUTBPoE2gS4ZJaHR0cDovL3RzdGxzZXIyMC5jcmwudGVsZXNlYy5kZS9ybC9U
ZWxla29tX1NlY3VyaXR5X1RMU19FQ0NfUm9vdF8yMDIwLmNybDCBnAYIKwYBBQUH
AQEEgY8wgYwwMgYIKwYBBQUHMAGGJmh0dHA6Ly90c3Rsc2VyMjAub2NzcC50ZWxl
c2VjLmRlL29jc3ByMFYGCCsGAQUFBzAChkpodHRwOi8vdHN0bHNlcjIwLmNydC50
ZWxlc2VjLmRlL2NydC9UZWxla29tX1NlY3VyaXR5X1RMU19FQ0NfUm9vdF8yMDIw
LmNydDATBgNVHSAEDDAKMAgGBmeBDAECATAKBggqhkjOPQQDAwNoADBlAjEAqdk/
EaSARcFNJmgHaDSCLHvT8ltwx7et3L/HAlji5F28SqFsc4EsyV4cQp8TGsFZAjBD
d0n+ad6lDlloNqAQKMeVNQKNUhOVfgB8LR10UXYH7tq/QMTI/+lcUjbEXQ4ev0I=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security TLS ECC Root 2020
Issuer
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 3
Valid from
2026-03-19T12:06:48+00:00
Expires
2033-09-30T23:59:59+00:00
Days remaining
2520
Serial (hex)
161CC80447599ECF6AAA8BF8B224EE0E
Signature
RSA-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4D:CE:5A:01:7B:B3:D8:1A:CF:82:3E:81:5A:AB:CB:83:75:2A:D3:E2:88:3B:35:9D:F4:29:35:DF:BD:49:70:75
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
E3:72:CC:6E:95:99:47:B1:E6:B3:61:4C:D1:CB:AB:E3:BA:CD:DE:9F
authorityKeyIdentifier
B5:03:F7:76:3B:61:82:6A:12:AA:18:53:EB:03:21:94:BF:FE:CE:CA
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://grcl3.crl.telesec.de/rl/T-TeleSec_GlobalRoot_Class_3.crl
authorityInfoAccess
CA Issuers - URI:http://grcl3.crt.telesec.de/crt/T-TeleSec_GlobalRoot_Class_3.crt
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →