DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

hs-ulm.de · 141.59.88.125:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Baden-Wuerttemberg O=Technische Hochschule Ulm CN=*.selma.thu.de
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Valid from
2026-07-22T22:07:07+00:00
Expires
2027-02-06T22:07:06+00:00
Days remaining
118
Serial (hex)
4D0F37D3AF90EB81F5DF8B8E0504CEC0
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.selma.thu.de, DNS:selma.thu.de, DNS:imap.thu.de, DNS:smtp.thu.de, DNS:webapps.hs-ulm.de, DNS:www.verwaltung.thu.de, DNS:misc.thu.de, DNS:www.thu.de, DNS:eval.thu.de, DNS:users.thu.de, DNS:pki.thu.de, DNS:webmail.hs-ulm.de, DNS:smtp.mail.hs-ulm.de, DNS:eval.hs-ulm.de, DNS:hs-ulm.de, DNS:imap.hs-ulm.de, DNS:webapps.thu.de, DNS:mail.hs-ulm.de, DNS:www.hs-ulm.de, DNS:webmail.mail.hs-ulm.de, DNS:www.verwaltung.hs-ulm.de, DNS:pki.hs-ulm.de, DNS:intranet.hs-ulm.de, DNS:intranet.thu.de, DNS:*.selma-q.thu.de, DNS:selma-q.thu.de, DNS:imap.mail.hs-ulm.de, DNS:autodiscover.mail.hs-ulm.de, DNS:activesync.hs-ulm.de, DNS:ldap.thu.de, DNS:fs.hs-ulm.de, DNS:ldap.hs-ulm.de, DNS:activesync.mail.hs-ulm.de, DNS:moodle.thu.de, DNS:users.hs-ulm.de, DNS:zeitwirtschaft.verwaltung.hs-ulm.de, DNS:thu.de, DNS:wpad.thu.de, DNS:smtp.hs-ulm.de, DNS:zeitwirtschaft.verwaltung.thu.de, DNS:webapps.verwaltung.thu.de, DNS:mail.thu.de, DNS:misc.hs-ulm.de, DNS:autodiscover.hs-ulm.de, DNS:*.selma-e.thu.de, DNS:selma-e.thu.de, DNS:moodle.hs-ulm.de, DNS:fs.thu.de, DNS:wpad.hs-ulm.de, DNS:webapps.verwaltung.hs-ulm.de, DNS:activesync.thu.de, DNS:webmail.thu.de, DNS:studium.thu.de, DNS:autodiscover.thu.de, DNS:studium.hs-ulm.de

SHA-256 fingerprint

87:90:5F:51:97:5E:D0:32:74:29:C7:C3:B1:68:EA:D0:83:CB:6C:E0:1A:CF:83:B8:B9:B3:86:7B:74:6F:60:AF
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-E1.cer
subjectAltName
DNS:*.selma.thu.de, DNS:selma.thu.de, DNS:imap.thu.de, DNS:smtp.thu.de, DNS:webapps.hs-ulm.de, DNS:www.verwaltung.thu.de, DNS:misc.thu.de, DNS:www.thu.de, DNS:eval.thu.de, DNS:users.thu.de, DNS:pki.thu.de, DNS:webmail.hs-ulm.de, DNS:smtp.mail.hs-ulm.de, DNS:eval.hs-ulm.de, DNS:hs-ulm.de, DNS:imap.hs-ulm.de, DNS:webapps.thu.de, DNS:mail.hs-ulm.de, DNS:www.hs-ulm.de, DNS:webmail.mail.hs-ulm.de, DNS:www.verwaltung.hs-ulm.de, DNS:pki.hs-ulm.de, DNS:intranet.hs-ulm.de, DNS:intranet.thu.de, DNS:*.selma-q.thu.de, DNS:selma-q.thu.de, DNS:imap.mail.hs-ulm.de, DNS:autodiscover.mail.hs-ulm.de, DNS:activesync.hs-ulm.de, DNS:ldap.thu.de, DNS:fs.hs-ulm.de, DNS:ldap.hs-ulm.de, DNS:activesync.mail.hs-ulm.de, DNS:moodle.thu.de, DNS:users.hs-ulm.de, DNS:zeitwirtschaft.verwaltung.hs-ulm.de, DNS:thu.de, DNS:wpad.thu.de, DNS:smtp.hs-ulm.de, DNS:zeitwirtschaft.verwaltung.thu.de, DNS:webapps.verwaltung.thu.de, DNS:mail.thu.de, DNS:misc.hs-ulm.de, DNS:autodiscover.hs-ulm.de, DNS:*.selma-e.thu.de, DNS:selma-e.thu.de, DNS:moodle.hs-ulm.de, DNS:fs.thu.de, DNS:wpad.hs-ulm.de, DNS:webapps.verwaltung.hs-ulm.de, DNS:activesync.thu.de, DNS:webmail.thu.de, DNS:studium.thu.de, DNS:autodiscover.thu.de, DNS:studium.hs-ulm.de
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
subjectKeyIdentifier
DE:27:76:FC:91:40:B7:E4:E9:EF:13:B8:E2:95:CF:5F:C3:5B:10:DC
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jul 22 22:17:12.678 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:53:69:CD:2B:D1:1F:BC:51:E6:17:58:1F: 7E:45:87:B0:FB:CB:96:83:EA:2E:A9:CB:0C:3E:66:41: 4B:04:E3:56:02:20:69:06:03:7D:BD:6E:BB:04:E1:81: CE:13:06:31:B8:ED:38:17:99:D5:46:17:DA:1C:5C:1C: 18:4C:D2:F6:30:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 22 22:17:12.700 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D8:85:FC:8C:99:59:8D:30:F6:54:D8: 74:42:34:A3:C3:C6:A5:C6:43:11:05:50:6A:9C:39:4A: 41:2C:84:BE:5A:02:21:00:DC:55:A5:DA:5C:8F:FA:0F: 81:C5:22:8D:31:70:0E:54:54:1E:25:78:1F:19:59:7F: 1C:13:67:63:79:BE:BC:25 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 22 22:17:12.648 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2F:18:C6:98:6D:22:78:D6:45:01:B6:22: 5B:25:E3:4D:20:72:A2:76:ED:35:18:B3:3C:AF:0F:3E: 83:6A:B6:E8:02:21:00:CC:E4:75:90:1A:71:3B:5F:D7: 6A:30:E6:99:A5:A0:02:D0:99:D2:AB:2F:60:1B:0E:1D: 16:08:60:98:0D:CF:B7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-11T00:07:23+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Valid from
2025-01-03T11:14:21+00:00
Expires
2039-12-31T11:14:20+00:00
Days remaining
4829
Serial (hex)
42FDDCE1261607E1A5E6935A400161DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6C:DF:0B:A1:71:1E:85:6D:22:8B:A0:0C:A0:4C:5C:1C:3D:79:94:4C:03:7B:71:3B:15:5A:4E:E4:B4:7E:C5:3C
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
subjectKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Valid from
2021-02-19T11:01:10+00:00
Expires
2045-02-13T11:01:09+00:00
Days remaining
6700
Serial (hex)
67749D8D77D83B6ADB22F4FF59E2BFCE
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

3F:99:CC:47:4A:CF:CE:4D:FE:D5:87:94:66:5E:47:8D:15:47:73:9F:2E:78:0F:1B:B4:CA:9B:13:30:97:D4:01
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →