DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

herzomedia.de · 134.119.0.208:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.herzomedia.de
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. OU=http://certs.starfieldtech.com/repository/ CN=Starfield Secure Certificate Authority - G2
Valid from
2026-01-13T12:52:44+00:00
Expires
2027-01-23T07:35:29+00:00
Days remaining
112
Serial (hex)
AB3925BA94873BC3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.herzomedia.de, DNS:herzomedia.de

SHA-256 fingerprint

22:C4:BD:29:FD:1D:D2:57:97:9D:F4:01:C1:EC:F5:F5:C2:DB:3E:5D:56:41:41:A6:56:2B:30:AB:AA:7A:39:6F
Certificate extensions & PEM
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
keyUsage
Digital Signature, Key Encipherment
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfig2s1-941.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.16.840.1.114414.1.7.23.1 CPS: http://certificates.starfieldtech.com/repository/
authorityInfoAccess
OCSP - URI:http://ocsp.starfieldtech.com/ CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfig2.crt
authorityKeyIdentifier
25:45:81:68:50:26:38:3D:3B:2D:2C:BE:CD:6A:D9:B6:3D:B3:66:63
subjectAltName
DNS:www.herzomedia.de, DNS:herzomedia.de
subjectKeyIdentifier
38:7B:CF:D8:78:20:98:0E:4A:1C:67:3A:03:21:B1:7A:78:63:21:36
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Jan 13 12:52:45.341 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4E:1E:22:84:FD:2C:CD:AA:52:69:29:5C: E7:75:A0:93:48:18:B4:8A:1A:6B:98:4E:12:36:B1:CC: 51:1D:5A:97:02:21:00:9B:9E:88:7A:17:3F:76:3C:C1: 2D:5D:F6:BE:36:F7:9C:77:32:BB:5D:01:E9:6A:C4:61: 5D:86:4A:46:D2:38:75 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 13 12:52:45.675 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:06:93:7D:9A:BC:6A:C4:E8:C4:1F:3B:F5: F8:98:F8:59:1F:C1:4D:C2:C3:94:02:33:63:37:CD:57: 15:C3:2C:1E:02:20:74:5A:D9:D3:6D:83:26:76:1D:4A: DD:10:A7:82:29:20:3E:15:ED:3D:C2:78:E9:B0:E6:46: 5F:9D:AA:58:EE:1F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 13 12:52:46.052 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BD:27:16:45:07:32:7A:6F:C3:3D:2F: 70:90:C0:6F:E9:60:EA:0A:EC:51:92:B5:21:70:57:50: 71:80:20:5D:F1:02:20:44:3C:51:C0:25:85:54:35:EF: 2F:9C:DD:E5:57:23:98:93:51:5E:7C:A7:AD:6E:51:B4: 79:5B:57:F1:CB:B6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-02T11:12:56+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. OU=http://certs.starfieldtech.com/repository/ CN=Starfield Secure Certificate Authority - G2
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2011-05-03T07:00:00+00:00
Expires
2031-05-03T07:00:00+00:00
Days remaining
1673
Serial (hex)
07
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

93:A0:78:98:D8:9B:2C:CA:16:6B:A6:F1:F8:A1:41:38:CE:43:82:8E:49:1B:83:19:26:BC:82:47:D3:91:CC:72
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
25:45:81:68:50:26:38:3D:3B:2D:2C:BE:CD:6A:D9:B6:3D:B3:66:63
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
OCSP - URI:http://ocsp.starfieldtech.com/
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://certs.starfieldtech.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2009-09-01T00:00:00+00:00
Expires
2037-12-31T23:59:59+00:00
Days remaining
4108
Serial (hex)
0
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2C:E1:CB:0B:F9:D2:F9:E1:02:99:3F:BE:21:51:52:C3:B2:DD:0C:AB:DE:1C:68:E5:31:9B:83:91:54:DB:B7:F5
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →