DNS
SSL certificate
TLSv1.3kbr.com · 151.101.129.242:443
The certificate expires within 30 days.
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=kbr.com
- Issuer
- C=US O=Certainly CN=Certainly Intermediate R1
- Valid from
- 2026-10-27T02:12:52+00:00
- Expires
- 2026-11-26T02:12:51+00:00
- Days remaining
- 24
- Serial (hex)
- 79DD13C4C2BD1B25D05DEC3C7775393A0564
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:kbr.com
SHA-256 fingerprint
5B:E6:8B:5A:03:22:C6:51:EE:F2:AE:18:F0:74:C1:73:F5:6C:B7:4A:55:88:DF:07:89:45:81:89:CB:D9:A3:71
Certificate extensions & PEM
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:FALSE
- subjectKeyIdentifier
- BF:14:AC:DE:E4:0E:43:2F:F8:3D:DD:22:24:BC:7E:63:F6:E9:DE:29
- authorityKeyIdentifier
- BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
- authorityInfoAccess
- CA Issuers - URI:http://int-r1.certainly.com
- subjectAltName
- DNS:kbr.com
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://crls.certainly.com/17182262453002514/3.crl
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Oct 27 03:11:22.366 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E8:EF:96:FD:DA:34:38:BC:C9:F9:2F: F9:3F:69:33:A0:E9:B5:57:A9:E5:6B:93:30:11:EE:CE: 54:5A:6C:C8:9D:02:21:00:93:CC:25:B7:5F:11:EA:FA: 4C:E3:F8:1B:8D:F2:98:34:36:74:92:0B:DC:68:FB:88: 42:50:2C:6A:AF:4C:7B:22 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 27 03:11:23.384 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:AA:FD:02:39:7F:21:7A:7F:46:F2:94: A2:11:B8:37:7C:C0:C9:9F:41:0D:35:16:EF:6B:43:7F: 8B:D3:22:F9:A2:02:20:01:2A:2E:95:58:39:27:83:5E: 69:52:25:45:27:00:E5:7F:6B:07:C4:D8:E8:07:D3:8B: 5D:2F:43:68:08:DC:C0
-----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISed0TxMK9GyXQXew8d3U5OgVkMA0GCSqGSIb3DQEBCwUA MEUxCzAJBgNVBAYTAlVTMRIwEAYDVQQKEwlDZXJ0YWlubHkxIjAgBgNVBAMTGUNl cnRhaW5seSBJbnRlcm1lZGlhdGUgUjEwHhcNMjYxMDI3MDIxMjUyWhcNMjYxMTI2 MDIxMjUxWjASMRAwDgYDVQQDEwdrYnIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA9AV4Gsj13a65p2B/l+LhTl8HpOgWYPRQHkXTM4TPfYQM9F/b vw888eLg90uW9Eg0Fnh2skGVQ6nfwiLKn/So2LVNf68MPooLuxA2ldNv41qwrMWt cXr+YkGIUkHDhlqsKsIEMUyHyf5Er/zWDpp6WjlZg2BH0GodwcIcs6q5u8He3miB mCVvc/ec3U51TAVBuJcKDpp17CoTXH9R2fYfWhazeVvO0FBcbJaaNshnT1tgVFIx LXss4DxWekJhRQI1pRw4uuo8j7GUzskjNIRoHGjBj1bQL9dFN37RUi5liJWT4bq6 wmozDWgp/rxq1lW6+EpSaUQMsF1dpT9nTkcAmQIDAQABo4ICJjCCAiIwDgYDVR0P AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFL8UrN7kDkMv+D3dIiS8fmP26d4pMB8GA1UdIwQYMBaAFL2Xnd+h2Bsl meMMBAaJZBLXZSTHMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDov L2ludC1yMS5jZXJ0YWlubHkuY29tMBIGA1UdEQQLMAmCB2tici5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybHMuY2Vy dGFpbmx5LmNvbS8xNzE4MjI2MjQ1MzAwMjUxNC8zLmNybDCCAQUGCisGAQQB1nkC BAIEgfYEgfMA8QB3ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAAB oXtXUP4AAAQDAEgwRgIhAOjvlv3aNDi8yfkv+T9pM6DptVep5WuTMBHuzlRabMid AiEAk8wlt18R6vpM4/gbjfKYNDZ0kgvcaPuIQlAsaq9MeyIAdgCUTkOH+uzB74Hz GSQmqBhlAcfTXzgCAT9yZ31VNy4Z2AAAAaF7V1T4AAAEAwBHMEUCIQCq/QI5fyF6 f0bylKIRuDd8wMmfQQ01Fu9rQ3+L0yL5ogIgASoulVg5J4NeaVIlRScA5X9rB8TY 6AfTi10vQ2gI3MAwDQYJKoZIhvcNAQELBQADggEBAHUxBNDTBg7/RYftgqy0xods 3VGVV1x6VbK+0oUMfFyLpGOV9+q+LdFLiGkVRuLn/vtn4WMslh7trtfO86VuOj7K DNsiRzhxpnMni5AzL/dU/wSMiH+583M1TdDMmNDB3d4swoHLZmvPinLpI0JvkMzX 1HkmcZhtBvbMjMjIqOMvwZ/7xLrGQvWG0xHyqk9cFf49nKPVFv0+z3ryxON2dDlJ EzAHKoVTQoB5guz1SBGz6fPRZRD5Ot9euCi4yYJdyCBH+oU2UeWCqxEsZUJ+Ya3a ZJ6apN/e2kw4N5tSzdNbM94eUrnj/psd7SoEDZ/JViv3r5wXZ2QgeWXEfo2MN2g= -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-01T23:04:52+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=US O=Certainly CN=Certainly Intermediate R1
- Issuer
- C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
- Valid from
- 2022-06-22T00:00:00+00:00
- Expires
- 2032-06-21T23:59:59+00:00
- Days remaining
- 2059
- Serial (hex)
- 11831CDE4CB573E5
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
FE:C4:1E:32:CA:75:C2:95:A6:24:0F:A6:39:D3:AB:E3:BF:B5:CB:13:1D:66:90:E2:33:1A:17:6B:ED:2E:5B:D2
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- subjectKeyIdentifier
- BD:97:9D:DF:A1:D8:1B:25:99:E3:0C:04:06:89:64:12:D7:65:24:C7
- authorityKeyIdentifier
- 7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
- authorityInfoAccess
- CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt.cer
- crlDistributionPoints
- Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl
- certificatePolicies
- Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.49945.1.1
-----BEGIN CERTIFICATE----- MIIEoDCCA4igAwIBAgIIEYMc3ky1c+UwDQYJKoZIhvcNAQELBQAwgY8xCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylT dGFyZmllbGQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0yMjA2 MjIwMDAwMDBaFw0zMjA2MjEyMzU5NTlaMEUxCzAJBgNVBAYTAlVTMRIwEAYDVQQK EwlDZXJ0YWlubHkxIjAgBgNVBAMTGUNlcnRhaW5seSBJbnRlcm1lZGlhdGUgUjEw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW0khmsa1kAMrw6Q6kPsiZ 6LfWXQcpcDnu1+Ql7+FYYyBKT3zFSsjx+ZTI2yRG2sFOwbBMchtQf5MGUoQfNznR ANlqUNXdWlMrkso93JburzqBEoNGy8utK0TNnepMbb1yc4YuXk/nMRZaBPA2Lh8u twUG3vMvNQHsliV48CQ+4CJutM34rvI9AfJeI2CkcxBUlCyYatGcA12nvCr7dGdy EKeG5G4XyBak48571FtQqNqkSkCQlqmv93LVoOHqzEQKcJWw8zPxZc0dnORZVmgL l3Ws/QltCsIf6OTyQOfGHi81ehr6P4j1KQ56MfgWcqBqdeIANxVcb0ZVVb3SiEhT AgMBAAGjggFHMIIBQzASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIB hjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFL2Xnd+h 2BslmeMMBAaJZBLXZSTHMB8GA1UdIwQYMBaAFHwMMh+n2TB/xH1oo2Kooc6rB1sn MF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL2NlcnRpZmljYXRl cy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3Nmcm9vdC1nMi5jcnQuY2Vy MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc3RhcmZpZWxkdGVjaC5jb20v c2Zyb290LWcyLmNybDAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAYOGGQEB MA0GCSqGSIb3DQEBCwUAA4IBAQBosoh/lcTPBVC36SxIqjmdnuKwHs4SUDa/o5+y AJ22DaZDIFMJS+LLhslCVPAO9lQ5LR0AviC8atueKWOxPUw5aNDodEpIe988xSNa LSuPXsAB93FJ5v2BxdCiDHlIZbJPAOVQAo+rP2WgaTcDFX6g6LvK1b/RS9kL+rCB OebvFIbOmhfErkXjR7F6p759ftTQ23tT1qoTgegkySRgugEp0mtveWq87UIsGgdI e3UVWONiA9l3hTmxRyHkaYLlBzDdVPt4MIUkFrxZAz/8ebh+x2KNfAO6Mxi/vdS0 9NEqn0ekjRmQK5UvHXoBNHVvZ1VrbMv6hlIMCt++bfb6UBoK -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.