SSL certificate
TLSv1.3fda.gov · 2.16.6.205:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=US ST=District of Columbia L=Washington O=US Department of Health and Human Services CN=www.fda.gov
- Issuer
- C=US O=IdenTrust OU=HydrantID Trusted Certificate Service CN=HydrantID Server CA O1
- Valid from
- 2026-02-11T16:55:46+00:00
- Expires
- 2027-03-13T16:54:46+00:00
- Days remaining
- 129
- Serial (hex)
- 40019C4DA15C83F2BA8F7F7F2C03D130
- Signature
- RSA-SHA256
- Public key
- EC 256 prime256v1
Subject alternative names (SAN)
DNS:fda.gov, DNS:dps.fda.gov, DNS:www.fda.gov, DNS:labels.fda.gov, DNS:ceportal.fda.gov, DNS:labels-mig.fda.gov, DNS:www.access.fda.gov, DNS:dps.preprod.fda.gov, DNS:www.preprod.fda.gov, DNS:govdashboard.fda.gov, DNS:labels.preprod.fda.gov, DNS:www.accessdata.fda.gov, DNS:purplebooksearch.fda.gov, DNS:www.access.preprod.fda.gov, DNS:www.accessdata-mig.fda.gov, DNS:www.accessdata.preprod.fda.gov, DNS:purplebooksearch.preprod.fda.gov
SHA-256 fingerprint
7E:1E:AF:67:3A:FE:23:A6:2A:E7:43:D7:D8:5C:8C:A9:2A:5A:4A:EA:00:20:C9:B2:94:B3:F8:B0:D2:71:99:44
Certificate extensions & PEM
- keyUsage
- Digital Signature
- authorityInfoAccess
- OCSP - URI:http://commercial.ocsp.identrust.com CA Issuers - URI:http://validation.identrust.com/certs/hydrantidcaO1.p7c
- authorityKeyIdentifier
- 89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
- certificatePolicies
- Policy: 2.23.140.1.2.2 Policy: 2.16.840.1.113839.0.6.3
- crlDistributionPoints
- Full Name: URI:http://validation.identrust.com/crl/hydrantidcao1.crl
- subjectAltName
- DNS:fda.gov, DNS:dps.fda.gov, DNS:www.fda.gov, DNS:labels.fda.gov, DNS:ceportal.fda.gov, DNS:labels-mig.fda.gov, DNS:www.access.fda.gov, DNS:dps.preprod.fda.gov, DNS:www.preprod.fda.gov, DNS:govdashboard.fda.gov, DNS:labels.preprod.fda.gov, DNS:www.accessdata.fda.gov, DNS:purplebooksearch.fda.gov, DNS:www.access.preprod.fda.gov, DNS:www.accessdata-mig.fda.gov, DNS:www.accessdata.preprod.fda.gov, DNS:purplebooksearch.preprod.fda.gov
- subjectKeyIdentifier
- 0E:86:05:A1:90:21:98:75:3F:E3:A8:89:80:FA:B4:49:40:9D:10:F7
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Feb 11 16:55:46.774 2026 GMT Extensions: 00:00:05:00:02:9C:49:D9 Signature : ecdsa-with-SHA256 30:45:02:20:6E:C0:44:30:44:21:CD:D8:06:8F:51:D8: BB:D0:30:39:46:AF:E1:62:8D:64:CA:AD:D8:33:B6:FE: 49:8F:6A:63:02:21:00:B3:7D:76:A0:76:48:CC:70:98: B4:CE:F7:E7:A0:06:6F:30:2A:21:4D:B5:00:F2:34:E5: 7A:8A:D1:5A:6A:50:EB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 11 16:55:46.690 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:58:81:C1:EC:AC:8D:20:15:69:F3:B2:20: 1F:81:07:28:79:52:EB:8B:CA:88:B0:74:AF:E6:50:88: 8C:F3:4D:D7:02:20:5F:DB:E8:CA:29:90:8D:BB:59:47: A3:68:BF:59:4D:9A:49:78:5C:B1:68:86:F3:22:59:62: 37:9A:C2:B7:4B:90 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Feb 11 16:55:46.676 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F4:1D:74:9C:32:3D:6B:57:0A:B5:9B: AD:AC:20:A9:91:BC:CB:AC:9B:06:EC:64:A1:74:8F:18: E3:4C:4A:A3:70:02:20:23:6B:BD:F0:B7:64:8B:42:D9: E5:10:32:23:E6:AC:91:81:4B:95:66:A9:AC:77:1C:4E: 35:AF:FA:3A:75:F2:C8
-----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIQQAGcTaFcg/K6j39/LAPRMDANBgkqhkiG9w0BAQsFADBy MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MS4wLAYDVQQLEyVIeWRy YW50SUQgVHJ1c3RlZCBDZXJ0aWZpY2F0ZSBTZXJ2aWNlMR8wHQYDVQQDExZIeWRy YW50SUQgU2VydmVyIENBIE8xMB4XDTI2MDIxMTE2NTU0NloXDTI3MDMxMzE2NTQ0 NlowgYwxCzAJBgNVBAYTAlVTMR0wGwYDVQQIExREaXN0cmljdCBvZiBDb2x1bWJp YTETMBEGA1UEBxMKV2FzaGluZ3RvbjEzMDEGA1UEChMqVVMgRGVwYXJ0bWVudCBv ZiBIZWFsdGggYW5kIEh1bWFuIFNlcnZpY2VzMRQwEgYDVQQDEwt3d3cuZmRhLmdv djBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABLRgBumNMk+zgdAZ2JwPLUDgFhk3 2XfeHH4hqjmp78ErUIx6o+AITPicqN1r+H0qLgeH4/is2pEi1WAXxeaQPeejggRx MIIEbTAOBgNVHQ8BAf8EBAMCB4AwgYUGCCsGAQUFBwEBBHkwdzAwBggrBgEFBQcw AYYkaHR0cDovL2NvbW1lcmNpYWwub2NzcC5pZGVudHJ1c3QuY29tMEMGCCsGAQUF BzAChjdodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NlcnRzL2h5ZHJh bnRpZGNhTzEucDdjMB8GA1UdIwQYMBaAFIm4m7ae7fuwxr0N7GdOPKOSnS35MCEG A1UdIAQaMBgwCAYGZ4EMAQICMAwGCmCGSAGG+S8ABgMwRgYDVR0fBD8wPTA7oDmg N4Y1aHR0cDovL3ZhbGlkYXRpb24uaWRlbnRydXN0LmNvbS9jcmwvaHlkcmFudGlk Y2FvMS5jcmwwggF+BgNVHREEggF1MIIBcYIHZmRhLmdvdoILZHBzLmZkYS5nb3aC C3d3dy5mZGEuZ292gg5sYWJlbHMuZmRhLmdvdoIQY2Vwb3J0YWwuZmRhLmdvdoIS bGFiZWxzLW1pZy5mZGEuZ292ghJ3d3cuYWNjZXNzLmZkYS5nb3aCE2Rwcy5wcmVw cm9kLmZkYS5nb3aCE3d3dy5wcmVwcm9kLmZkYS5nb3aCFGdvdmRhc2hib2FyZC5m ZGEuZ292ghZsYWJlbHMucHJlcHJvZC5mZGEuZ292ghZ3d3cuYWNjZXNzZGF0YS5m ZGEuZ292ghhwdXJwbGVib29rc2VhcmNoLmZkYS5nb3aCGnd3dy5hY2Nlc3MucHJl cHJvZC5mZGEuZ292ghp3d3cuYWNjZXNzZGF0YS1taWcuZmRhLmdvdoIed3d3LmFj Y2Vzc2RhdGEucHJlcHJvZC5mZGEuZ292giBwdXJwbGVib29rc2VhcmNoLnByZXBy b2QuZmRhLmdvdjAdBgNVHQ4EFgQUDoYFoZAhmHU/46iJgPq0SUCdEPcwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIIBhQYKKwYBBAHWeQIEAgSCAXUEggFx AW8AfgCOykcLrN5q86IGsKR6hLdG/h/Gv5U+JeabTuQCSPPG6AAAAZxNoV1WAAgA AAUAApxJ2QQDAEcwRQIgbsBEMEQhzdgGj1HYu9AwOUav4WKNZMqt2DO2/kmPamMC IQCzfXagdkjMcJi0zvfnoAZvMCohTbUA8jTleorRWmpQ6wB1AExj3JjlnB2riPYe ij3ero+rRKM3e1+blMP7oZz8wb4mAAABnE2hXQIAAAQDAEYwRAIgWIHB7KyNIBVp 87IgH4EHKHlS64vKiLB0r+ZQiIzzTdcCIF/b6MopkI27WUejaL9ZTZpJeFyxaIbz IlliN5rCt0uQAHYAHJ9oLOn68EVpUPgbloqH3dsyENhM5siy44JSSsTPWZ8AAAGc TaFc9AAABAMARzBFAiEA9B10nDI9a1cKtZutrCCpkbzLrJsG7GShdI8Y40xKo3AC ICNrvfC3ZItC2eUQMiPmrJGBS5Vmqax3HE41r/o6dfLIMA0GCSqGSIb3DQEBCwUA A4IBAQCUalU5HK3D0O8ZTF55hZdgQKA/Aj1EH6Yc2sVs3nxPeeN8W+zEev/2ni+P jpAiTbFvkHABKXsB2hEZoYeJ4SN1d1Q9aCluXJsdLyTo5UttAbG8zNwgwaEEvRle 7wcdDX7nJc/8WfTJa/0Cqmb3MJp3yDC61HrJ5L1GPl8/PJpwozxRhXFKVYmZvrlO aiG7/1sLJ7/GdMOyhpgGNXjFAMw4d/7ipJ1zLvbufm9cHDPWVm2W201PHxufp15S 2+BQ4G5rR4UsrcvPcjb8hJgSkPRZWRihXb89vbRNArQTMYFT4aZLeL78Ubxf7eUo jhcCL8N5M7GwA1K1HoguyKCZrl3b -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-03T21:39:54+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=IdenTrust OU=HydrantID Trusted Certificate Service CN=HydrantID Server CA O1
- Issuer
- C=US O=IdenTrust CN=IdenTrust Commercial Root CA 1
- Valid from
- 2019-12-12T16:56:15+00:00
- Expires
- 2029-12-12T16:56:15+00:00
- Days remaining
- 1134
- Serial (hex)
- 40016EFB0A205CFAEBE18F71D73ABB78
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
8B:B2:F6:88:3F:ED:28:9A:52:1B:A2:7C:47:84:82:95:08:74:E1:43:CA:CC:EC:6F:C0:25:99:0C:0C:46:81:3E
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- authorityInfoAccess
- OCSP - URI:http://commercial.ocsp.identrust.com CA Issuers - URI:http://validation.identrust.com/roots/commercialrootca1.p7c
- authorityKeyIdentifier
- ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76
- certificatePolicies
- Policy: X509v3 Any Policy CPS: https://secure.identrust.com/certificates/policy/ts/index.html User Notice: Explicit Text: This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/index.html
- crlDistributionPoints
- Full Name: URI:http://validation.identrust.com/crl/commercialrootca1.crl
- subjectKeyIdentifier
- 89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
-----BEGIN CERTIFICATE----- MIIG1jCCBL6gAwIBAgIQQAFu+wogXPrr4Y9x1zq7eDANBgkqhkiG9w0BAQsFADBK MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTkxMjEyMTY1NjE1WhcNMjkx MjEyMTY1NjE1WjByMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MS4w LAYDVQQLEyVIeWRyYW50SUQgVHJ1c3RlZCBDZXJ0aWZpY2F0ZSBTZXJ2aWNlMR8w HQYDVQQDExZIeWRyYW50SUQgU2VydmVyIENBIE8xMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA6huZbDVWMGj7XbFZQWl+uhh0SIeWhO8rl79MV4+7ZSj2 Lxos5e8za0H1JVVzTNPaup2Go438C5zeaqaGtyUshV8D0xwUiWyamspTao7PjjuC h81+tp9z76rp1irjNMh5o/zeJ0h3Kag5zQG9sfI7J7ihLnTFbArjNZIRaZnszOnu Ga18jh/9epnGmEYL5BV119LNVo5luWshvG/kifk9mHjtkA8LzVdsOkvCrmHBpzpD o4qyPk2lDypq04IU48JUqhFrG4kvlPz+VO7sse0uxYXj81FdNb2qoJnvAjqV+Zj4 Nii8PIcuNGqghDjzrs2PW/gEhkaWDikhhSY7DjOLiQIDAQABo4ICjjCCAoowEgYD VR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwgYkGCCsGAQUFBwEBBH0w ezAwBggrBgEFBQcwAYYkaHR0cDovL2NvbW1lcmNpYWwub2NzcC5pZGVudHJ1c3Qu Y29tMEcGCCsGAQUFBzAChjtodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29t L3Jvb3RzL2NvbW1lcmNpYWxyb290Y2ExLnA3YzAfBgNVHSMEGDAWgBTtRBnA0/AG i+6ke75C5yZUyI42djCCASsGA1UdIASCASIwggEeMIIBGgYEVR0gADCCARAwSgYI KwYBBQUHAgEWPmh0dHBzOi8vc2VjdXJlLmlkZW50cnVzdC5jb20vY2VydGlmaWNh dGVzL3BvbGljeS90cy9pbmRleC5odG1sMIHBBggrBgEFBQcCAjCBtAyBsVRoaXMg VHJ1c3RJRCBTZXJ2ZXIgQ2VydGlmaWNhdGUgaGFzIGJlZW4gaXNzdWVkIGluIGFj Y29yZGFuY2Ugd2l0aCBJZGVuVHJ1c3QncyBUcnVzdElEIENlcnRpZmljYXRlIFBv bGljeSBmb3VuZCBhdCBodHRwczovL3NlY3VyZS5pZGVudHJ1c3QuY29tL2NlcnRp ZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDBKBgNVHR8EQzBBMD+gPaA7hjlo dHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NybC9jb21tZXJjaWFscm9v dGNhMS5jcmwwHQYDVR0OBBYEFIm4m7ae7fuwxr0N7GdOPKOSnS35MB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAgEAdMrY9RYw NyVgzeOqqcbdIxy5gHRQFbh3RTuIi0fsnbEh3v7BN+I3zmXJq71gyLOzG9wvqCul XtLQNAZnrlSacXichYDV5zdcnbBrFH/CXt47oW4L+9yD5LPMKaSU5DP9DEu88ws+ QAjzL6/q+hP+CLQh0/vr62HoEGS1+NyLfnJIN0RVcVDxBAwVqNF8MU5An98ZmHj4 XaSPA6s2s+3794ULe6r2TzVXiLtun0JJ0kBZL3Mx0plhONvhq7jCsa6bYCF71DNs 7VhrNUh+BZNdQvLqAdfQJtFY5EiWpExhiPC/ZdtVYN5RfrOMCWgBbjnl5e2n5WYa 7LM4HR+z7U+6JCBqaRjlbaNNLed/qg+OMdpBJe16qJJT9E5Uzdc4PsUbL2a+9IUb uxx8nmrbQswe8p4yvcy9RLje07a4Y09otZ/Aai3Gijup67jTCez1hd7VYIAuznqP os6SLponh2vVcHu9vQoT18OCL9janJ2Ilh3lJHUxv1kHD9IxZNpn0j/QPzGFv2Ez UXZVAECEQLS80qWh6zCXhXl6dVAeM84sSysIiY4Kv8oaXEF5Atyg0LcUuB6Iwgg3 K/QUY3QusnjrDcgGRyoWn0Zt53meMCi3C0hoQ+FrQ3zF4/7wtxKnGGBH5hKBU23M 2XrKEZL5RmGZidpWP6ZBbvEs2MqSD7zcFvY= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=IdenTrust CN=IdenTrust Commercial Root CA 1
- Issuer
- C=US O=IdenTrust CN=IdenTrust Commercial Root CA 1
- Valid from
- 2014-01-16T18:12:23+00:00
- Expires
- 2034-01-16T18:12:23+00:00
- Days remaining
- 2630
- Serial (hex)
- 0A0142800000014523C844B500000002
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
5D:56:49:9B:E4:D2:E0:8B:CF:CA:D0:8A:3E:38:72:3D:50:50:3B:DE:70:69:48:E4:2F:55:60:30:19:E5:28:AE
Certificate extensions & PEM
- keyUsage
- Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76
-----BEGIN CERTIFICATE----- MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBK MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQw MTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScw JQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ldhNlT 3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU +ehcCuz/mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gp S0l4PJNgiCL8mdo2yMKi1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1 bVoE/c40yiTcdCMbXTMTEl3EASX2MN0CXZ/g1Ue9tOsbobtJSdifWwLziuQkkORi T0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl3ZBWzvurpWCdxJ35UrCL vYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzyNeVJSQjK Vsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZK dHzVWYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHT c+XvvqDtMwt0viAgxGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hv l7yTmvmcEpB4eoCHFddydJxVdHixuuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5N iGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZIhvcNAQELBQAD ggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH 6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwt LRvM7Kqas6pgghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93 nAbowacYXVKV7cndJZ5t+qntozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3 +wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmVYjzlVYA211QC//G5Xc7UI2/YRYRK W2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUXfeu+h1sXIFRRk0pT AwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/rokTLq l1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG 4iZZRHUe2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZ mUlO+KWA2yUPHGNiiskzZ2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A 7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7RcGzM7vRX+Bi6hG6H -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.