SSL certificate
TLSv1.3fundaments.nl · 198.202.211.1:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=fundaments.nl
- Issuer
- C=US O=Google Trust Services CN=WE1
- Valid from
- 2026-09-03T03:26:35+00:00
- Expires
- 2026-12-02T04:26:32+00:00
- Days remaining
- 47
- Serial (hex)
- D393DD8AA16495310E5C3D5421233671
- Signature
- ecdsa-with-SHA256
- Public key
- EC 256 prime256v1
Subject alternative names (SAN)
DNS:fundaments.nl
SHA-256 fingerprint
CB:E7:FC:09:99:B5:FD:31:4B:7A:7D:83:7F:33:76:5C:DD:08:D5:3D:BB:32:34:2D:DF:7C:4F:A1:77:2A:7F:03
Certificate extensions & PEM
- keyUsage
- Digital Signature
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:FALSE
- subjectKeyIdentifier
- A9:5D:F8:8D:2C:C7:EC:7E:D0:65:4F:99:34:DE:59:DC:70:84:85:76
- authorityKeyIdentifier
- 90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
- authorityInfoAccess
- CA Issuers - URI:http://i.pki.goog/we1.crt
- subjectAltName
- DNS:fundaments.nl
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://c.pki.goog/we1/BKzL6WSusQA.crl
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Sep 3 04:26:35.719 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DD:44:E9:51:C7:20:92:B7:55:CC:C4: 64:1B:1F:7D:47:98:A4:D1:2B:47:4B:92:07:C0:E6:14: AC:A6:CE:40:84:02:20:76:2C:FF:5B:D4:F7:04:D9:CC: 26:EA:0B:83:D6:B9:F1:90:B7:FC:46:16:4E:E6:78:92: 3D:F9:BB:9D:83:19:AA Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 25:B7:EF:DE:A1:13:01:93:ED:93:07:97:70:AA:32:2A: 26:62:0D:E3:5A:C8:AA:7C:75:19:7D:E0:B1:A9:E0:65 Timestamp : Sep 3 04:26:35.799 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4F:67:56:A7:6A:93:0A:73:59:1C:84:72: E6:AF:4D:87:8A:07:70:4C:22:F9:35:F3:28:D4:89:76: 11:88:9F:28:02:21:00:82:44:6E:04:39:28:98:BC:E2: 94:4B:D3:8B:ED:20:1A:47:C6:5C:81:E3:DF:9E:37:AC: 72:F6:C1:07:0C:51:DF
-----BEGIN CERTIFICATE----- MIIDcjCCAxegAwIBAgIRANOT3YqhZJUxDlw9VCEjNnEwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDkwMzAzMjYzNVoXDTI2MTIwMjA0MjYzMlowGDEWMBQG A1UEAxMNZnVuZGFtZW50cy5ubDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABOsy eMx2Ha6TL6M340i6F17u9UxxTnQ24ZQewXRLwBdGzs/gtYhAOXC0PjiQi2wGQc3V wJRVO0lXv/bIMsju4vujggIdMIICGTAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAww CgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqV34jSzH7H7QZU+Z NN5Z3HCEhXYwHwYDVR0jBBgwFoAUkHeSNWfE/6jMqeZ72YB5e8yT+TgwNQYIKwYB BQUHAQEEKTAnMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93ZTEuY3J0 MBgGA1UdEQQRMA+CDWZ1bmRhbWVudHMubmwwEwYDVR0gBAwwCjAIBgZngQwBAgEw NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2MucGtpLmdvb2cvd2UxL0JLekw2V1N1 c1FBLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANgJVTuUT3r/yBYZb5RP hauw+Pxeh1UmDxXRLnK7RUsUAAABoGWEx0cAAAQDAEcwRQIhAN1E6VHHIJK3VczE ZBsffUeYpNErR0uSB8DmFKymzkCEAiB2LP9b1PcE2cwm6guD1rnxkLf8RhZO5niS Pfm7nYMZqgB2ACW3796hEwGT7ZMHl3CqMiomYg3jWsiqfHUZfeCxqeBlAAABoGWE x5cAAAQDAEcwRQIgT2dWp2qTCnNZHIRy5q9Nh4oHcEwi+TXzKNSJdhGInygCIQCC RG4EOSiYvOKUS9OL7SAaR8ZcgePfnjescvbBBwxR3zAKBggqhkjOPQQDAgNJADBG AiEA4z1qrHupsC+T5z7VYOmZH1Kgn1xaHNcQo8ykKbzG+gcCIQCjpkJExcLljAij nDKETPVGbVuMuq4BeMLAkIrT1eWuUg== -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-15T22:50:45+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=Google Trust Services CN=WE1
- Issuer
- C=US O=Google Trust Services LLC CN=GTS Root R4
- Valid from
- 2023-12-13T09:00:00+00:00
- Expires
- 2029-02-20T14:00:00+00:00
- Days remaining
- 858
- Serial (hex)
- 7FF31977972C224A76155D13B6D685E3
- Signature
- ecdsa-with-SHA384
- Public key
- EC 256 prime256v1
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
1D:FC:16:05:FB:AD:35:8D:8B:C8:44:F7:6D:15:20:3F:AC:9C:A5:C1:A7:9F:D4:85:7F:FA:F2:86:4F:BE:BF:96
Certificate extensions & PEM
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- subjectKeyIdentifier
- 90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
- authorityKeyIdentifier
- 80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C
- authorityInfoAccess
- CA Issuers - URI:http://i.pki.goog/r4.crt
- crlDistributionPoints
- Full Name: URI:http://c.pki.goog/r/r4.crl
- certificatePolicies
- Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=Google Trust Services LLC CN=GTS Root R4
- Issuer
- C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
- Valid from
- 2023-11-15T03:43:21+00:00
- Expires
- 2028-01-28T00:00:42+00:00
- Days remaining
- 469
- Serial (hex)
- 7FE530BF331343BEDD821610493D8A1B
- Signature
- RSA-SHA256
- Public key
- EC 384 secp384r1
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
76:B2:7B:80:A5:80:27:DC:3C:F1:DA:68:DA:C1:70:10:ED:93:99:7D:0B:60:3E:2F:AD:BE:85:01:24:93:B5:A7
Certificate extensions & PEM
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- 80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C
- authorityKeyIdentifier
- 60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
- authorityInfoAccess
- CA Issuers - URI:http://i.pki.goog/gsr1.crt
- crlDistributionPoints
- Full Name: URI:http://c.pki.goog/r/gsr1.crl
- certificatePolicies
- Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.