DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

golden1.com · 23.73.0.61:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=US jurisdictionST=California businessCategory=Private Organization serialNumber=154822 C=US ST=California L=Sacramento O=The Golden 1 Credit Union CN=www.golden1.com
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-02-19T00:00:00+00:00
Expires
2027-02-18T23:59:59+00:00
Days remaining
108
Serial (hex)
019FA34EA102BBCF744430E52F91093F
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:www.golden1.com, DNS:apply.golden1.com, DNS:apps.golden1.com, DNS:golden1.com, DNS:myoffers.golden1.com

SHA-256 fingerprint

31:34:DE:A4:3F:40:D3:5E:8E:6E:4A:35:B2:A0:4B:95:95:27:EF:88:25:66:B5:7E:FF:F2:94:62:85:4C:76:BA
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
2B:C3:32:41:6D:23:E4:9B:C1:48:19:67:75:3F:F3:33:6B:94:F7:FB
subjectAltName
DNS:www.golden1.com, DNS:apply.golden1.com, DNS:apps.golden1.com, DNS:golden1.com, DNS:myoffers.golden1.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 19 16:18:04.761 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:38:1C:2F:03:C4:1C:34:B3:A0:41:3A:67: DD:AE:47:66:A2:00:51:52:52:BB:16:59:DA:C0:6F:15: 6A:2A:02:4E:02:21:00:99:10:4C:30:B9:6F:FF:B7:04: 17:3C:02:B5:D1:75:06:8D:E4:41:95:0B:7E:CE:09:10: AE:8C:33:D5:89:41:22 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Feb 19 16:18:04.752 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:68:C5:96:13:DA:FE:3E:69:46:AB:CF:9E: D0:6A:8B:DB:8D:9D:86:18:66:F3:7E:FC:DD:43:DC:CE: 23:C4:D5:65:02:21:00:C2:7D:3C:1F:E2:C2:1E:48:6E: C9:C5:8A:9D:2A:F2:5D:DE:AA:62:F0:D7:AA:41:01:0A: 69:84:F3:15:56:9F:D2 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Feb 19 16:18:04.773 2026 GMT Extensions: 00:00:05:00:02:E0:3D:12 Signature : ecdsa-with-SHA256 30:45:02:21:00:8B:1B:98:E0:16:49:FA:E9:44:4A:08: 5A:B1:39:21:0D:28:E1:3A:1C:6A:C0:10:AF:52:77:73: 96:06:11:33:78:02:20:04:A7:09:25:4C:7E:83:90:52: BE:61:50:56:D1:20:6F:A9:EA:6B:0C:C0:A6:90:DE:4A: 2C:B2:A1:30:23:B7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-02T12:12:34+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1623
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →