DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

dwp.gov.uk · 151.101.2.30:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=GB ST=London L=London O=Government Digital Service CN=dwp.gov.uk
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Atlas R46 OV TLS CA 2026 Q3
Valid from
2026-09-16T09:22:39+00:00
Expires
2027-04-03T08:22:39+00:00
Days remaining
192
Serial (hex)
012F10BA919479E94826FC37B1F4AB48
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:dwp.gov.uk, DNS:www.dwp.gov.uk

SHA-256 fingerprint

A2:49:A1:24:4D:C8:29:C6:AD:F7:78:C9:B2:C3:D1:D6:9A:E7:44:AC:37:50:94:7F:E6:7B:F3:C6:34:D0:88:0C
Certificate extensions & PEM
subjectAltName
DNS:dwp.gov.uk, DNS:www.dwp.gov.uk
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
subjectKeyIdentifier
2E:8D:64:2D:43:05:62:9A:7B:9E:3E:E4:77:54:85:FC:42:FB:46:A1
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2 CPS: https://www.globalsign.com/repository/
basicConstraints
CA:FALSE
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/ca/gsatlasr46ovtlsca2026q3 CA Issuers - URI:http://secure.globalsign.com/cacert/gsatlasr46ovtlsca2026q3.crt
authorityKeyIdentifier
E3:4B:DA:BC:6D:AB:D7:55:B2:44:92:BE:60:D4:71:24:84:6B:B3:51
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/ca/gsatlasr46ovtlsca2026q3.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Sep 16 09:22:42.416 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C3:14:13:98:66:C8:22:BD:27:9D:4F: DD:6A:69:DA:14:14:AE:D1:14:AC:90:AF:F9:6E:A0:6E: 8F:18:06:53:E8:02:21:00:BA:DA:83:61:39:ED:2E:3E: 4F:D2:D4:05:6E:82:21:81:8F:0F:05:30:05:CE:44:DA: 24:94:33:89:48:89:CD:5D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 16 09:22:42.433 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:13:58:01:62:03:31:09:7D:3B:73:C5:AA: E3:8E:17:4D:DC:AD:20:4F:38:51:9E:12:68:C4:99:08: DD:09:AD:58:02:21:00:E2:39:28:A7:34:5B:11:37:92: D9:13:4D:A5:F7:F7:97:F7:E4:CC:C3:C2:F4:28:36:BB: 9B:C1:F3:B4:10:9E:B3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 16 09:22:42.737 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DD:C1:AD:69:22:61:8D:6D:2F:23:17: 9C:1F:7D:1C:17:67:89:C1:9B:2D:5E:05:92:99:78:A0: E6:E6:AB:C6:45:02:20:39:79:27:64:1D:C3:F4:09:44: 60:5B:E6:83:6B:C7:E0:43:E7:2C:83:CC:5B:61:5D:8D: 52:8D:32:46:E7:4B:1F
-----BEGIN CERTIFICATE-----
MIIHtjCCBZ6gAwIBAgIQAS8QupGUeelIJvw3sfSrSDANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEvMC0GA1UE
AxMmR2xvYmFsU2lnbiBBdGxhcyBSNDYgT1YgVExTIENBIDIwMjYgUTMwHhcNMjYw
OTE2MDkyMjM5WhcNMjcwNDAzMDgyMjM5WjBpMQswCQYDVQQGEwJHQjEPMA0GA1UE
CAwGTG9uZG9uMQ8wDQYDVQQHDAZMb25kb24xIzAhBgNVBAoMGkdvdmVybm1lbnQg
RGlnaXRhbCBTZXJ2aWNlMRMwEQYDVQQDDApkd3AuZ292LnVrMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFqW8FvMJW3qTr8+blioZgEoMQlCGg12kDax
AT/NkqfLClOfcCGAW01K7C3PC1VuWGFJGp/tU2O73zOmmC522aitSbi5lgZ2z3Nd
XJ9eTrf7/JdWnz8+J3HjWkfKK2hqeO7TI+HHJUiLSfMVEByzl/dqYiTeKtPCI0gx
J1Il3a7blxNoxMNOptw3uYLmt+gYS8lDuMPQZG/tOd7z32tzQNfdwRJcZra66Glv
NlzsVpwCDa7IJ9SJnVfOXgUg8LS95mTgX/LgwYKNhA7HeamvFT/ojinp9vFpklfX
wqxANRxYdRdwOznmCcNUjk0518TWMq4vsWlL5XGAYMUENiW+EQIDAQABo4IDaDCC
A2QwJQYDVR0RBB4wHIIKZHdwLmdvdi51a4IOd3d3LmR3cC5nb3YudWswDgYDVR0P
AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBQujWQtQwVi
mnuePuR3VIX8QvtGoTBXBgNVHSAEUDBOMAgGBmeBDAECAjBCBgorBgEEAaAyCgEC
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAwGA1UdEwEB/wQCMAAwgaAGCCsGAQUFBwEBBIGTMIGQMEEGCCsGAQUF
BzABhjVodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9jYS9nc2F0bGFzcjQ2b3Z0
bHNjYTIwMjZxMzBLBggrBgEFBQcwAoY/aHR0cDovL3NlY3VyZS5nbG9iYWxzaWdu
LmNvbS9jYWNlcnQvZ3NhdGxhc3I0Nm92dGxzY2EyMDI2cTMuY3J0MB8GA1UdIwQY
MBaAFONL2rxtq9dVskSSvmDUcSSEa7NRMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6
Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3I0Nm92dGxzY2EyMDI2cTMu
Y3JsMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwBgTJqven93XwHUBvySDciZ
6wscffjJUhv6+hd3O5eLyQAAAaCphoxwAAAEAwBIMEYCIQDDFBOYZsgivSedT91q
adoUFK7RFKyQr/luoG6PGAZT6AIhALrag2E57S4+T9LUBW6CIYGPDwUwBc5E2iSU
M4lIic1dAHYATGPcmOWcHauI9h6KPd6uj6tEozd7X5uUw/uhnPzBviYAAAGgqYaM
gQAABAMARzBFAiATWAFiAzEJfTtzxarjjhdN3K0gTzhRnhJoxJkI3QmtWAIhAOI5
KKc0WxE3ktkTTaX395f35MzDwvQoNrubwfO0EJ6zAHYAHJ9oLOn68EVpUPgbloqH
3dsyENhM5siy44JSSsTPWZ8AAAGgqYaNsQAABAMARzBFAiEA3cGtaSJhjW0vIxec
H30cF2eJwZstXgWSmXig5uarxkUCIDl5J2Qdw/QJRGBb5oNrx+BD5yyDzFthXY1S
jTJG50sfMA0GCSqGSIb3DQEBCwUAA4ICAQBchXTQXC8JcSgwnz2vuPyIzltn6iz0
6MnMFh859xyeatuJnuHaiHyaGNyw/+PASDgyifmJ+4oYIWqS4cfNVpHo6SKDscth
1X9DxICJbJR9vGyOp22hM9ireWaeyu+aDDPG4iwt3ARZinY7QRy02N3uRDJ96LU3
kGBD5nq0OyAIgfZU1NPxczdorW7XGa0H8tlbgad/SGCAqGrg4tRFg/BqVMFcalOu
A0Jc3GMGPITbOzvLLcqw4P56BC3rSOzl0TFdB0TPG9K6S/IQac9JsJqVh+LFhvSp
+cRU/XKACneUH3M7UM/aAGmRWHWYYyG2Sc71Z1QOO0+1B42viU6xcCxtlprGdIz5
3VibSCJ+zNi55JKGY3CGe4t9vYoSYAY86CowffU6QuaKGH7TpLeCrABMOAOY8ImP
POjbxtwlY0FiAXo0iK1WRGZ6JzYLo6fcF2K69QUcIyaCFZj0KluQd0QXsxFwRKHQ
hLqMVnk6XK9OcUOgxOVj6ZaBJ093R5uLiXXU7SuCKWZFHfAHJRu12Eto5Fu2bxwO
8UWWnHiRjXbm8KNZLP5xpGILnZm1pwzbWhgsIizUXUdyzkZT5BLdZLl+/Ji8K36M
Td1+Mb7eaaMgcjLJABu30FN3GBshbIwKbKgX+fp2GWmyq9l8s3V1MHFPe2wRbd+2
bzga0214Cenb+g==
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-22T13:44:15+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Atlas R46 OV TLS CA 2026 Q3
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Valid from
2026-04-22T03:00:57+00:00
Expires
2028-04-22T00:00:00+00:00
Days remaining
577
Serial (hex)
85AC70C49C4BCED3DEBF905F68BB42A4
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

37:49:19:F5:BB:46:34:D1:80:E3:A9:FA:4A:B8:49:B8:59:12:BF:41:69:D4:A4:61:0E:E5:F9:DC:1C:18:D9:60
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
E3:4B:DA:BC:6D:AB:D7:55:B2:44:92:BE:60:D4:71:24:84:6B:B3:51
authorityKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr46 CA Issuers - URI:http://secure.globalsign.com/cacert/rootr46.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/rootr46.crl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2019-11-20T00:00:00+00:00
Expires
2029-03-18T00:00:00+00:00
Days remaining
907
Serial (hex)
75A8BAD878F8AF305F72DD1C1140DF3A
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A6:3C:13:98:B5:F8:DD:2D:43:2F:BE:4C:2C:19:14:2B:EA:6D:5D:02:21:FA:E7:94:71:8A:E7:59:7A:CC:A9:6D
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →