DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

esrf.fr · 193.49.43.164:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=FR ST=Auvergne-Rhône-Alpes L=Grenoble O=European Synchrotron Radiation Facility CN=esrf.fr
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Valid from
2026-07-24T16:02:11+00:00
Expires
2027-02-08T16:02:10+00:00
Days remaining
125
Serial (hex)
164FD00193B9A5E83EBF07B659397E65
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:esrf.fr

SHA-256 fingerprint

59:96:F0:C5:C9:A6:CC:40:D4:01:B5:89:EF:5B:B5:09:F3:25:37:C5:94:86:28:C7:F8:A7:6C:15:06:55:78:9C
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-E1.cer
subjectAltName
DNS:esrf.fr
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
subjectKeyIdentifier
2D:AB:D4:25:7D:20:D6:99:A9:14:08:E6:79:B7:DC:7C:A9:15:82:D9
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jul 24 16:12:12.557 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:89:FF:7D:C3:8C:ED:19:D7:9E:D2:2F: 06:75:1D:46:0D:EE:64:CE:1A:F7:7E:E9:70:0E:AB:E9: D5:3D:9E:8E:EB:02:21:00:9D:C1:1B:1A:FF:6D:7A:99: C4:EF:E8:3E:2A:DA:36:E2:B2:6B:40:5D:A6:B4:C7:CC: 88:8C:AB:95:72:73:17:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 24 16:12:12.595 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:74:85:1A:C7:73:82:B6:E7:C9:27:09:CF: 66:49:C0:7D:CA:D6:EB:61:BB:F8:64:8C:54:5C:75:7A: 87:43:3C:21:02:20:25:F2:75:D7:26:E4:7B:75:34:5E: 2E:7B:C2:6A:13:3A:F0:47:DE:D1:B2:A5:29:7E:B8:82: BA:D2:22:29:01:E9 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 24 16:12:12.540 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:76:EC:8D:BF:A6:FC:6D:9F:B6:39:B5:2C: 57:56:5F:84:AA:E7:3C:66:D9:92:10:55:22:38:C8:16: C1:15:26:40:02:20:70:4E:45:6E:FA:4C:A2:E5:44:9B: AD:88:A0:CD:65:20:89:A1:3A:5E:BB:74:A8:92:34:24: DC:21:FF:AC:DA:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-06T00:51:38+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Valid from
2025-01-03T11:14:21+00:00
Expires
2039-12-31T11:14:20+00:00
Days remaining
4834
Serial (hex)
42FDDCE1261607E1A5E6935A400161DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6C:DF:0B:A1:71:1E:85:6D:22:8B:A0:0C:A0:4C:5C:1C:3D:79:94:4C:03:7B:71:3B:15:5A:4E:E4:B4:7E:C5:3C
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
subjectKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Issuer
C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions ECC RootCA 2015
Valid from
2021-09-02T07:44:37+00:00
Expires
2029-08-31T07:44:36+00:00
Days remaining
1060
Serial (hex)
716027C8857A73542DEF516C1C2EEB0F
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

50:E2:7F:90:EB:6A:F4:95:B0:E6:EE:B6:55:CC:89:44:4C:27:D3:C9:5B:68:23:FA:02:AB:DC:95:F1:63:6A:E1
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
B4:22:0B:82:99:24:01:0E:9C:BB:E4:0E:FD:BF:FB:97:20:93:99:2A
authorityInfoAccess
CA Issuers - URI:http://repo.harica.gr/certs/HaricaECCRootCA2015.crt
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HaricaECCRootCA2015.crl
subjectKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →