DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

fourseasons.com · 16.52.104.21:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CA ST=Ontario O=Four Seasons Hotels Limited CN=fourseasons.com
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Valid from
2026-08-20T00:00:00+00:00
Expires
2027-03-06T23:59:59+00:00
Days remaining
161
Serial (hex)
DC14B5B393200C4AD8E4CC166550795A
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:fourseasons.com, DNS:carrieres.fourseasons.com, DNS:fonts.fourseasons.com, DNS:m.fourseasons.com, DNS:magazine.fourseasons.com, DNS:preferredpartners.fourseasons.com, DNS:press.fourseasons.com, DNS:reservations.fourseasons.com, DNS:residences.fourseasons.com, DNS:residentialbrandhub.fourseasons.com, DNS:secure.fourseasons.com, DNS:stay.fourseasons.com, DNS:www.1.fourseasons.com, DNS:www.fourseasons.com

SHA-256 fingerprint

F2:97:2E:DE:AD:1F:48:BC:8E:14:3F:32:FD:8F:C4:01:87:CE:67:4F:A9:DE:81:80:B9:C5:6F:6E:2A:CB:4A:24
Certificate extensions & PEM
authorityKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
subjectKeyIdentifier
07:9E:BD:55:45:D1:0C:3B:75:E0:C6:52:2C:BB:BA:B9:37:36:4B:48
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 20 15:05:56.728 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0D:0B:2C:8A:2F:14:D2:D8:17:7C:D4:9A: C7:A0:37:21:23:34:A8:83:00:95:47:9B:29:B0:6C:9D: 58:59:01:D6:02:21:00:9C:5F:FF:A2:91:2C:EF:68:87: 78:B5:08:97:26:92:89:9B:5B:20:D2:A3:5A:95:F2:57: 2D:56:04:E6:44:53:53 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Aug 20 15:05:56.783 2026 GMT Extensions: 00:00:05:00:09:E5:8E:FD Signature : ecdsa-with-SHA256 30:46:02:21:00:D0:A1:E8:5D:63:84:C9:5A:93:22:6E: E3:51:83:03:A0:A3:C8:8D:72:45:A7:88:DC:E8:56:5E: 22:34:C7:F2:12:02:21:00:F0:9F:E4:A4:62:5A:26:E3: D9:5A:C5:E2:41:20:9D:13:FE:7C:34:35:01:C5:F4:FF: 38:12:20:CE:73:F8:D5:C8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Aug 20 15:05:56.844 2026 GMT Extensions: 00:00:05:00:01:91:65:2A Signature : ecdsa-with-SHA256 30:46:02:21:00:8D:DA:D9:BA:43:25:25:15:82:AC:A4: 0B:B8:C0:BE:0E:0C:CA:4E:9B:DD:4A:4E:48:D6:4C:97: C2:AE:25:DF:9F:02:21:00:A7:95:6C:F2:3D:3C:5A:2B: 74:70:D5:03:31:A1:10:AF:12:D2:17:55:DC:09:1B:2D: 77:D8:5B:FD:05:84:FC:C6
subjectAltName
DNS:fourseasons.com, DNS:carrieres.fourseasons.com, DNS:fonts.fourseasons.com, DNS:m.fourseasons.com, DNS:magazine.fourseasons.com, DNS:preferredpartners.fourseasons.com, DNS:press.fourseasons.com, DNS:reservations.fourseasons.com, DNS:residences.fourseasons.com, DNS:residentialbrandhub.fourseasons.com, DNS:secure.fourseasons.com, DNS:stay.fourseasons.com, DNS:www.1.fourseasons.com, DNS:www.fourseasons.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-26T07:31:07+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3464
Serial (hex)
2C1A3C76E943DDDDFF191B31890AED71
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →