DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ecmwf.int · 54.73.72.151:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Nordrhein-Westfalen O=European Centre for Medium-Range Weather Forecasts CN=www.ecmwf.int
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
Valid from
2025-11-11T13:28:13+00:00
Expires
2026-11-11T13:28:13+00:00
Days remaining
50
Serial (hex)
4843FEA5A1B3246CF7C7F1F99E259097
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:www.ecmwf.int, DNS:www.www.ecmwf.int, DNS:ecmwf.int, DNS:stage.ecmwf.int, DNS:www.stage.ecmwf.int, DNS:cmsdev.ecmwf.int, DNS:www.cmsdev.ecmwf.int

SHA-256 fingerprint

6C:BA:94:2E:4F:E5:8F:03:98:0D:5E:81:91:CB:13:A4:58:0F:01:EF:7B:16:D5:FA:05:7F:6D:F4:CF:C4:12:84
Certificate extensions & PEM
authorityKeyIdentifier
86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer OCSP - URI:http://ocsp-tls.harica.gr
subjectAltName
DNS:www.ecmwf.int, DNS:www.www.ecmwf.int, DNS:ecmwf.int, DNS:stage.ecmwf.int, DNS:www.stage.ecmwf.int, DNS:cmsdev.ecmwf.int, DNS:www.cmsdev.ecmwf.int
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
subjectKeyIdentifier
C7:D7:74:26:10:83:61:9F:C3:10:B6:B8:A6:B0:C6:57:CE:C0:12:C2
keyUsage
Digital Signature, Key Encipherment
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 11 13:38:15.472 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:38:89:75:4F:BC:5C:EC:25:C8:B2:33:69: E6:DB:4A:A2:D1:8C:36:0A:43:0B:26:D6:D2:78:DB:AC: 60:A1:A4:FF:02:20:02:95:E3:DB:F1:26:16:B1:7D:B5: F1:0D:82:3D:3C:43:45:A6:17:DD:5A:41:2D:7D:DA:DD: 49:FB:A1:1C:E9:22 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 11 13:38:15.401 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:63:3A:C5:C7:CE:5D:C7:96:6A:95:A2:81: 3A:4E:ED:7F:A1:20:FF:4A:36:5D:82:A5:7D:62:BB:57: 25:EF:12:09:02:21:00:EA:BF:FC:5B:72:4F:9C:DF:9F: 38:32:81:60:09:9C:CC:0B:58:F1:54:05:29:3B:B9:E2: 4B:A0:81:2E:89:00:78 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 11 13:38:15.452 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1D:F6:DD:2E:60:C0:4F:A1:E4:C4:BC:E8: 07:DD:A3:20:58:64:2C:0C:8D:26:19:D7:86:AA:C6:65: CF:1B:47:18:02:21:00:A4:A5:D9:F2:BD:33:FC:28:2A: CD:96:B8:48:CE:92:17:61:ED:2B:E7:66:39:3D:92:9F: 19:0E:1C:40:35:45:67
-----BEGIN CERTIFICATE-----
MIIIRzCCBq+gAwIBAgIQSEP+paGzJGz3x/H5niWQlzANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAx
MB4XDTI1MTExMTEzMjgxM1oXDTI2MTExMTEzMjgxM1owgYAxCzAJBgNVBAYTAkRF
MRwwGgYDVQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMTswOQYDVQQKDDJFdXJvcGVh
biBDZW50cmUgZm9yIE1lZGl1bS1SYW5nZSBXZWF0aGVyIEZvcmVjYXN0czEWMBQG
A1UEAwwNd3d3LmVjbXdmLmludDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAKzjZhq8mBGDslyZlHrrGPuG+SIOTEOwXhTcbU1G1k7NMEa66olLXxdkWssC
f6OGUcwnhJXzlGqY40w3qx/qLnos73i4lqoI+Cx1/IgcwLBSd1NCHVStLgA0DzMX
pCsxBqefm4XaL3qzptxR41Pcnlt4BeX0ryTkoB/IjenMe3g2SMDwKpXUA2ocj+S/
2ZYG6PMyFCld/rWScPsU3tGaK09iDa6VFfKRqIhtFwojKvD3/nBykJrY17wHzg62
2LOegiEoqeqsfj543rNsWfLxhuNOBQ0w3UZ0n08SAX7o8GLgkptBJQ012mHCDqPa
gV1yQp98oOkNJGVCOcUtvR3fs2mGV4n3z5ccOUsn1HWUWkrPCGjlHhkeCe2EVgAo
dPF2dZTPcwHyDUicTpHwZeXaXpNS1g3ye8Q3CjqbUWO2/xS46x9J+B1ioO9LwWbd
38RWTg8m+KSeEL1/0NRK1ingu6wf89Ssuv4Dx4ba++2Su6TMR9Q0huoVZqG1WjY0
lTSjiyqToB9Mq71Vc/aa0XpDsBR6lV1bhMwSLMcpR3m23SmvMv1GZqJQR4N2Z4fD
oVuXAaUxSpOV3rjwPhyyqnEcIDZSYOnofYfPVMSi9Vzau3P1uOx+t1WRp1Ozcm7I
wtxmQ8gzcRpVMqo+4DC0AswHY+vMa0wpqqZP5jDmzwtfmvINAgMBAAGjggNaMIID
VjAfBgNVHSMEGDAWgBSGAXI/jKlw4jEGUxbOAV9becg8OzBvBggrBgEFBQcBAQRj
MGEwOAYIKwYBBQUHMAKGLGh0dHA6Ly9jcnQuaGFyaWNhLmdyL0hBUklDQS1HRUFO
VC1UTFMtUjEuY2VyMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC10bHMuaGFyaWNh
LmdyMIGEBgNVHREEfTB7gg13d3cuZWNtd2YuaW50ghF3d3cud3d3LmVjbXdmLmlu
dIIJZWNtd2YuaW50gg9zdGFnZS5lY213Zi5pbnSCE3d3dy5zdGFnZS5lY213Zi5p
bnSCEGNtc2Rldi5lY213Zi5pbnSCFHd3dy5jbXNkZXYuZWNtd2YuaW50MC0GA1Ud
IAQmMCQwCAYGZ4EMAQICMAgGBgQAj3oBBzAOBgwrBgEEAYHPEQEBAQIwHQYDVR0l
BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6
Ly9jcmwuaGFyaWNhLmdyL0hBUklDQS1HRUFOVC1UTFMtUjEuY3JsMB0GA1UdDgQW
BBTH13QmEINhn8MQtrimsMZXzsASwjAOBgNVHQ8BAf8EBAMCBaAwggF9BgorBgEE
AdZ5AgQCBIIBbQSCAWkBZwB1AK9niDtXsE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/n
hYc6AAABmnMjdzAAAAQDAEYwRAIgOIl1T7xc7CXIsjNp5ttKotGMNgpDCybW0njb
rGChpP8CIAKV49vxJhaxfbXxDYI9PENFphfdWkEtfdrdSfuhHOkiAHYA2AlVO5RP
ev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQAAAGacyN26QAABAMARzBFAiBjOsXH
zl3HlmqVooE6Tu1/oSD/SjZdgqV9YrtXJe8SCQIhAOq//FtyT5zfnzgygWAJnMwL
WPFUBSk7ueJLoIEuiQB4AHYArKswcGzr7IQx9BPS9JFfER5CJEOx8qaMTzwrO6ce
AsMAAAGacyN3HAAABAMARzBFAiAd9t0uYMBPoeTEvOgH3aMgWGQsDI0mGdeGqsZl
zxtHGAIhAKSl2fK9M/woKs2WuEjOkhdh7SvnZjk9kp8ZDhxANUVnMA0GCSqGSIb3
DQEBCwUAA4IBgQBEqDO/Kbm9qxKDiWm9ngnvNu5IC2nJR3i1ymYRsPHGSmMHRfTk
fhhdvUOcpVZgZLEl14RLz2qmoSh3IhunH3T+fq9ZgKrdvAykCu1Pq5doDRpWT7VK
aD7NYRMU54hX/XoKsbNc4asN7FN9C3QHCuZccug5vJiqXa+qK32pQAiIh+0ZsKq9
c4JPy0CsaDHFynIp09ibtVLYvFyf5yE/E4xg9bfA/igyV+7m9W4QYvCpmv3hsDz9
2fJhxgRDFD24B/nJUtbnjYtAVfqelIAmofYOkLZgfaGTwP2W72tZlp/wuS5Ht+Zz
6HgiB5igmtJvxA7AwOqWjZzDSBcSEZIEf1JcSPPmpwNHoilm2vbNvzx8PLHpcj3k
GxFFjGGBFEJ09C19r4iWKKvDe6gzFSJ8YzegaixDt2v2X2y8YDbm2TJ/X2p4Ycx7
HvKSqSa/mDxuR2bycDNoHhgm1/yDxhl8pR6IeMEsOxfWgLGn00RqjBoTRHtNG7+6
2NagLjGa5jLaHPc=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T05:58:06+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
Valid from
2025-01-03T11:15:00+00:00
Expires
2039-12-31T11:14:59+00:00
Days remaining
4848
Serial (hex)
14D57BF3692228219A5567FA91651B22
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

5B:67:8D:C4:40:95:A5:28:95:B6:3B:31:F2:72:27:F4:B3:6C:3E:34:74:91:BF:2B:FA:69:18:37:A5:FB:8C:79
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-RSA.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
subjectKeyIdentifier
86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →