DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dtag.de · 80.158.66.24:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. Peer certificate CN=`ebs08.telekom.de' did not match expected CN=`dtag.de'

Certificate verification failed

Subject
CN=ebs08.telekom.de
Issuer
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security DV RSA CA 22
Valid from
2025-11-25T13:36:45+00:00
Expires
2026-11-30T23:59:59+00:00
Days remaining
69
Serial (hex)
301FF4CF53892B715A207B6729416469
Signature
RSA-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:ebs08.telekom.de

SHA-256 fingerprint

D4:BF:13:35:A4:2B:CA:2C:49:C5:5E:B1:AC:44:42:61:6F:93:E3:7F:C2:25:35:37:9B:75:54:4F:EB:1C:32:F4
Certificate extensions & PEM
authorityKeyIdentifier
F1:3D:3A:A6:5C:76:FD:BE:9C:A8:0D:0D:29:73:11:D1:1B:75:67:07
subjectKeyIdentifier
02:6E:F2:1A:6F:D6:4F:94:B1:80:88:7E:1F:FA:5A:85:B2:A6:D7:01
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://docs.serverid.telesec.de/cps/serverid.htm
crlDistributionPoints
Full Name: URI:http://crl.serverid.telesec.de/rl/Telekom_Security_DV_RSA_CA_22.crl
authorityInfoAccess
OCSP - URI:http://ocsp.serverid.telesec.de/ocspr CA Issuers - URI:http://crt.serverid.telesec.de/crt/Telekom_Security_DV_RSA_CA_22.crt
basicConstraints
CA:FALSE
subjectAltName
DNS:ebs08.telekom.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 25 13:36:47.241 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:57:28:60:0B:C5:6F:C8:93:7A:61:7A:B3: 74:2F:FF:13:C3:C9:33:F1:8A:E5:19:C7:CC:86:F9:47: 3A:2B:A7:BE:02:21:00:83:DE:1E:7D:3A:D9:11:43:8D: AD:E5:C2:1D:FA:61:E4:61:AF:19:5D:D9:B0:61:31:E6: 16:85:93:6D:4F:EC:BD Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 25 13:36:47.188 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C1:05:BC:BC:E8:41:7A:9E:5C:3A:C4: 26:F0:00:D7:D5:C3:C3:C6:E8:86:E8:9D:C4:5B:D7:72: 9B:87:A5:DB:55:02:21:00:AF:E9:7A:5A:9B:E2:2B:7D: 2F:AE:4E:F0:55:48:6F:38:FB:51:75:DB:21:3F:F5:2C: 92:81:CC:86:98:AA:B5:06 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 25 13:36:47.458 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7D:A9:B2:9F:B8:7B:10:E2:F4:19:0D:CF: 2D:AD:E7:1B:C4:9A:C9:D3:9A:00:59:DA:46:01:F8:7A: B9:0D:17:4B:02:20:6F:B4:AA:EB:83:DF:9B:D8:69:57: 00:5E:E6:5F:03:BD:CC:A8:E4:06:6F:72:62:2F:D7:81: 3D:5B:CE:AF:A8:89 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 25 13:36:47.587 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0B:D2:16:05:C9:17:7A:D6:F1:BD:A6:97: 02:C8:17:2D:BA:04:33:CB:AD:90:CE:83:B8:9A:EC:70: AD:E4:B4:A1:02:20:47:1A:B1:0E:90:73:9A:6D:76:97: 9F:E2:1B:B9:45:F4:A1:9A:64:B3:73:E5:DC:5E:86:05: FD:15:5F:E9:D0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T13:37:37+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security DV RSA CA 22
Issuer
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Valid from
2022-02-22T10:09:06+00:00
Expires
2032-02-22T23:59:59+00:00
Days remaining
1979
Serial (hex)
2103BE2C2AA30A5B5B1F0E1A4456239A
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

93:8E:52:64:25:01:DD:16:E2:3D:8A:EB:FB:97:EB:3C:3B:25:62:F5:0C:32:41:44:C3:90:94:6B:29:68:4A:7E
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
F1:3D:3A:A6:5C:76:FD:BE:9C:A8:0D:0D:29:73:11:D1:1B:75:67:07
authorityKeyIdentifier
BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://grcl2.crl.telesec.de/rl/T-TeleSec_GlobalRoot_Class_2.crl
authorityInfoAccess
OCSP - URI:http://grcl2.ocsp.telesec.de/ocspr CA Issuers - URI:http://grcl2.crt.telesec.de/crt/T-TeleSec_GlobalRoot_Class_2.crt
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Issuer
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Valid from
2008-10-01T10:40:14+00:00
Expires
2033-10-01T23:59:59+00:00
Days remaining
2566
Serial (hex)
01
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

91:E2:F5:78:8D:58:10:EB:A7:BA:58:73:7D:E1:54:8A:8E:CA:CD:01:45:98:BC:0B:14:3E:04:1B:17:05:25:52
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →