DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

fondsnet.de · 195.149.82.111:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Nordrhein-Westfalen O=FONDSNET Vermögensberatung und -verwaltungs GmbH CN=*.fondsnet.de
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV E36
Valid from
2026-01-29T00:00:00+00:00
Expires
2027-03-01T23:59:59+00:00
Days remaining
116
Serial (hex)
953A8F63B04992FEAA80BD8AF97419A9
Signature
ecdsa-with-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:*.fondsnet.de, DNS:fondsnet.de

SHA-256 fingerprint

AA:4C:1B:D7:25:2E:76:F5:EF:AF:58:2E:0C:17:1C:2B:6F:73:FD:B5:F7:B3:92:ED:B6:AD:45:FE:F6:CA:07:10
Certificate extensions & PEM
authorityKeyIdentifier
4C:38:7A:25:34:6B:FD:F9:8F:1A:60:1C:92:71:AA:67:F9:82:37:EB
subjectKeyIdentifier
D7:D9:4B:C3:97:B2:E7:B0:91:A4:BF:DE:32:45:82:EF:57:57:DC:D7
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVE36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVE36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.fondsnet.de, DNS:fondsnet.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 29 13:44:07.695 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3C:5D:A5:B8:41:59:A0:35:C0:FF:B0:FB: B7:D0:64:44:C2:BD:C5:87:7F:39:FB:A7:B1:54:AA:44: C5:8A:CA:A9:02:20:57:EE:30:F0:10:11:52:82:EC:D3: CB:26:86:03:1C:32:9D:FC:19:0C:13:8A:B3:75:1C:E9: 85:BF:53:72:56:95 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jan 29 13:44:08.186 2026 GMT Extensions: 00:00:05:00:02:0E:C0:D9 Signature : ecdsa-with-SHA256 30:46:02:21:00:D6:8E:88:36:A6:F0:2C:39:07:65:8C: 65:F1:C6:DC:7F:23:72:47:4E:A2:4C:AE:C4:CB:38:9C: C3:6E:5F:0F:16:02:21:00:FD:2C:A7:60:5D:ED:AE:9C: 07:CF:E4:1F:BC:2E:DD:F6:2C:22:B4:60:FF:EA:86:D9: 77:14:CC:88:22:9B:F1:5B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jan 29 13:44:07.833 2026 GMT Extensions: 00:00:05:00:00:1D:91:72 Signature : ecdsa-with-SHA256 30:45:02:20:46:BE:B7:F4:E8:D0:2C:1C:9A:6B:61:5F: BB:25:EC:E8:B8:FC:11:D4:EE:B2:CC:4A:11:87:8D:4B: BA:87:BE:7F:02:21:00:D2:DD:B4:D5:42:5E:48:85:1C: 9D:CE:5A:C1:57:F3:08:6B:26:75:AE:DC:AC:65:7D:36: F2:46:F2:C2:90:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-05T22:40:58+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV E36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3424
Serial (hex)
12B0648BE8E2B91074216C1DAE9C5795
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

41:02:BB:08:B7:EA:19:E5:67:EB:67:10:38:4C:54:0A:FD:AD:99:3A:F0:D9:DF:BF:91:CA:62:73:75:5B:8B:A0
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
4C:38:7A:25:34:6B:FD:F9:8F:1A:60:1C:92:71:AA:67:F9:82:37:EB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4092
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →