DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

gs-dns.de · 85.209.55.19:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=wittfeldconsulting.de
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2024-10-11T00:00:00+00:00
Expires
2025-10-11T23:59:59+00:00
Days remaining
-369
Serial (hex)
D0D1A10AF46F43643128BECE0171817A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:wittfeldconsulting.de, DNS:www.wittfeldconsulting.de

SHA-256 fingerprint

A2:DD:25:21:60:FF:86:93:AA:E0:DD:4F:91:9F:01:5B:9D:7E:B3:19:4C:86:5C:91:9C:4F:3F:4F:37:F7:E2:7B
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
6F:C8:11:9A:74:C0:7A:2E:F9:61:2A:F3:B7:DD:5E:E5:42:4C:10:A8
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:wittfeldconsulting.de, DNS:www.wittfeldconsulting.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Oct 11 07:17:13.374 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:18:90:E5:D0:0B:67:A6:2F:5A:EF:93:13: 69:84:C8:15:E0:C3:E4:80:E3:BE:DC:96:CD:D7:2E:77: 76:1F:C8:F5:02:21:00:E3:8B:BA:13:64:15:6E:2D:03: 62:4E:90:B3:A0:65:63:22:70:0B:CD:38:85:34:BF:21: 78:DD:0C:47:B9:AC:74 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Oct 11 07:17:13.491 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FD:FC:C2:19:95:83:86:E1:30:7A:68: 13:05:A6:A8:AA:F1:3F:32:B9:E5:9D:55:49:3D:AD:2B: 7A:21:BF:78:3B:02:20:1B:D5:77:76:2E:29:40:A2:3B: 0F:00:44:62:1F:B6:1E:1B:09:D0:F9:EA:1E:C2:6D:DE: 7F:C9:21:A0:49:99:4D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Oct 11 07:17:13.262 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:04:34:1A:4C:B3:4F:A8:A3:CE:FF:76:1A: C2:34:80:55:D3:77:8C:1D:90:04:F4:10:6C:32:51:F3: 47:2C:85:D3:02:20:40:E2:B6:45:7F:26:0A:61:72:2E: 3F:E0:10:BC:C3:65:5F:D1:0B:65:E7:68:79:7B:9E:68: DD:70:AC:D2:D4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-SHA256 · Checked 2026-10-15T13:28:52+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1538
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →