DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

keyweb.de · 95.169.160.30:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
businessCategory=Private Organization serialNumber=HRB 112403 jurisdictionC=DE jurisdictionST=Thueringen jurisdictionL=Jena C=DE ST=Thüringen L=Erfurt street=Neuwerkstr. 45-46 O=KEYWEB AG CN=keyweb.de
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R3 EV TLS CA 2025
Valid from
2026-02-26T15:16:22+00:00
Expires
2027-03-30T15:16:21+00:00
Days remaining
182
Serial (hex)
679C7B5DA19E9C0B5ACCA2AC
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:keyweb.de, DNS:lizenzierung.keyweb.de, DNS:kcp.keyweb.de, DNS:disc.keyweb.de, DNS:owa.keyweb.de, DNS:mail.keyweb.de, DNS:autodiscover.keyweb.de, DNS:www.keyweb.de

SHA-256 fingerprint

2C:ED:72:31:E5:F0:0C:7A:29:A8:38:72:43:C5:40:01:33:42:BF:1B:77:CF:B5:DB:88:6B:7A:58:2F:C2:58:53
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr3evtlsca2025.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr3evtlsca2025
certificatePolicies
Policy: 2.23.140.1.1 Policy: 1.3.6.1.4.1.4146.10.1.1 CPS: https://www.globalsign.com/repository/ Policy: 1.3.6.1.4.1.4146.1.1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr3evtlsca2025.crl
subjectAltName
DNS:keyweb.de, DNS:lizenzierung.keyweb.de, DNS:kcp.keyweb.de, DNS:disc.keyweb.de, DNS:owa.keyweb.de, DNS:mail.keyweb.de, DNS:autodiscover.keyweb.de, DNS:www.keyweb.de
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
63:10:7F:E4:28:33:9A:F8:47:60:59:52:7E:57:10:C7:4D:F8:17:16
subjectKeyIdentifier
BA:2D:58:07:21:76:EE:98:F3:4F:A4:43:76:7A:52:9B:8B:63:F8:F2
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Feb 26 15:16:26.834 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3D:F7:61:4B:3A:2C:36:7F:13:A1:0D:04: F1:24:6E:61:94:8A:E6:69:C2:FE:D1:3A:C1:55:CE:CB: 82:0E:AB:8F:02:20:4D:CF:C9:2F:F8:2D:8B:6B:AA:0B: D0:B3:90:C3:33:9C:D4:B8:16:3E:DA:90:5B:3F:68:AD: A3:38:AF:8C:51:55 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 26 15:16:26.922 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F4:C4:4A:13:99:6F:F4:6A:9F:03:8F: 40:E7:9C:78:3E:13:09:06:D0:21:3F:24:96:16:3B:A8: 3E:C8:F2:58:66:02:21:00:8E:6F:B6:5C:B9:FE:8A:EF: 05:5B:68:7E:63:24:B2:4C:5E:A3:E9:0C:2A:2C:0E:3B: 60:46:2D:96:91:65:E0:AD Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Feb 26 15:16:27.050 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8C:16:C7:29:FA:1A:C9:54:07:3B:C7: 81:58:16:BF:15:E0:38:E8:13:22:E6:1C:51:3F:F2:54: FF:10:79:5F:8D:02:21:00:BA:E3:0F:98:2F:3F:B1:34: AF:B6:B5:B1:FC:A3:B0:53:E9:4A:36:0F:2E:D8:47:95: 4B:5F:61:9F:DA:18:DF:9E
-----BEGIN CERTIFICATE-----
MIIIqDCCB5CgAwIBAgIMZ5x7XaGenAtazKKsMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBFViBUTFMgQ0EgMjAyNTAeFw0yNjAyMjYxNTE2MjJa
Fw0yNzAzMzAxNTE2MjFaMIH0MR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlv
bjETMBEGA1UEBRMKSFJCIDExMjQwMzETMBEGCysGAQQBgjc8AgEDEwJERTEbMBkG
CysGAQQBgjc8AgECEwpUaHVlcmluZ2VuMRUwEwYLKwYBBAGCNzwCAQETBEplbmEx
CzAJBgNVBAYTAkRFMRMwEQYDVQQIDApUaMO8cmluZ2VuMQ8wDQYDVQQHEwZFcmZ1
cnQxGjAYBgNVBAkTEU5ldXdlcmtzdHIuIDQ1LTQ2MRIwEAYDVQQKEwlLRVlXRUIg
QUcxEjAQBgNVBAMTCWtleXdlYi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBALayyek9JdQGBiTeMKXENRkJMeCqGyKpGCAGiD4nETkpwVFm1IGe2RQd
5jZsn79y+GvZRRYsCLph80LOlv088Dl/YHqWtw+8PMR19y0u6AwJwUOMsdpIw3y1
z0qnR59oE2x/Pk96mgEbohf0421jhG2qQvIk68Vcd4vUq/A/Frrdlc+C5+tfsIUI
P+meJii6YYCg8+ZieyIKZtWl2gS0AlY42/bSeV0kBFeMRV30ejJLnqLgx3MalgmC
bUs4DWYr5NiPPBNLLjjLfvRqKz6VvnEgz/QgACZK0zVjCshdd7cUyGacj29MJF0u
QsLMl9oG7WX0LA9NRKpYdMYTtwAx+82BpJnuAyszIEy+65kl4WFkIX+wBO2Y0kXG
1aAL+aoExlH+KRDUz3SU9HPXwV7TCi+V/gLVZ7Ci/TFpzcmu1gPDRq83aYMcyMhW
04Kn8PeI6rIGgpleUnOJMo9/5uEyjzZO2no0EQrDHppextPAAs6nBC5yrdn3B1fv
ZlZaP36bI0olkmlHV/tSaEBsz0CuSGWvWxyJWDv3hKxxbD8KhWTcXQOrSd0PJkvy
vK/Nskme+59mETM0hTnxmCUKsxIhJo4FgpAPUhxNQkEXKrUZ2r5W0b37KiKzhknN
Uj7D6N9L+GC9u1UUR3rsJEWkolpGmxAxEittlEl21LXGjiydMCnpAgMBAAGjggPY
MIID1DAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBkwYIKwYBBQUHAQEE
gYYwgYMwRgYIKwYBBQUHMAKGOmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20v
Y2FjZXJ0L2dzZ2NjcjNldnRsc2NhMjAyNS5jcnQwOQYIKwYBBQUHMAGGLWh0dHA6
Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjNldnRsc2NhMjAyNTBjBgNVHSAE
XDBaMAcGBWeBDAEBMEIGCisGAQQBoDIKAQEwNDAyBggrBgEFBQcCARYmaHR0cHM6
Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCwYJKwYBBAGgMgEBMEEG
A1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3NnY2Ny
M2V2dGxzY2EyMDI1LmNybDCBkwYDVR0RBIGLMIGIgglrZXl3ZWIuZGWCFmxpemVu
emllcnVuZy5rZXl3ZWIuZGWCDWtjcC5rZXl3ZWIuZGWCDmRpc2Mua2V5d2ViLmRl
gg1vd2Eua2V5d2ViLmRlgg5tYWlsLmtleXdlYi5kZYIWYXV0b2Rpc2NvdmVyLmtl
eXdlYi5kZYINd3d3LmtleXdlYi5kZTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwHwYDVR0jBBgwFoAUYxB/5CgzmvhHYFlSflcQx034FxYwHQYDVR0OBBYE
FLotWAchdu6Y80+kQ3Z6UpuLY/jyMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dQAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9ZnwAAAZyahdBSAAAEAwBG
MEQCID33YUs6LDZ/E6ENBPEkbmGUiuZpwv7ROsFVzsuCDquPAiBNz8kv+C2La6oL
0LOQwzOc1LgWPtqQWz9oraM4r4xRVQB3AExj3JjlnB2riPYeij3ero+rRKM3e1+b
lMP7oZz8wb4mAAABnJqF0KoAAAQDAEgwRgIhAPTEShOZb/RqnwOPQOeceD4TCQbQ
IT8klhY7qD7I8lhmAiEAjm+2XLn+iu8FW2h+YySyTF6j6QwqLA47YEYtlpFl4K0A
dwBgTJqven93XwHUBvySDciZ6wscffjJUhv6+hd3O5eLyQAAAZyahdEqAAAEAwBI
MEYCIQCMFscp+hrJVAc7x4FYFr8V4DjoEyLmHFE/8lT/EHlfjQIhALrjD5gvP7E0
r7a1sfyjsFPpSjYPLthHlUtfYZ/aGN+eMA0GCSqGSIb3DQEBCwUAA4IBAQBKkLXs
NsLS+trEePBlotqIdVEM+NyL1/hsjXfFV4FXNjDPyhhPzzP1fNpYtOPbdyUKuIum
jm7cZyCF+CwEBq2TLVFQ3xt1adda7foFEnLEpYZM9h5OxqYNJhSbsqOjGcNkDJDR
ITxAmJFLHZnU5arYPUKisf5Zx+QucloSWowC/RF6ObL3LkM8GE0OpTUZavTTzKeV
RtGu2tyWgtuVaKGGrq6+2c8Ll/nbfViRibfRpPppeubiVCajd/AOC+ULTjZnNacO
4Pg2pjS0G3cS88VNp1C4HHXRsaXnRyZSEMEjjwWFYvExconMuf4a9Rh4J4YDSwdQ
0Lb5wLy2NjItlCb2
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-29T10:27:46+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R3 EV TLS CA 2025
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2025-07-16T03:05:46+00:00
Expires
2027-07-16T00:00:00+00:00
Days remaining
289
Serial (hex)
83DA866C9F52D51A9318B8D0E7C03169
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1B:29:28:02:1A:4B:89:CF:0F:57:2A:24:36:E9:14:E2:54:12:AD:58:ED:EE:22:1E:6C:7C:3C:54:37:17:9A:26
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
63:10:7F:E4:28:33:9A:F8:47:60:59:52:7E:57:10:C7:4D:F8:17:16
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r3.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: 2.23.140.1.1 Policy: 1.3.6.1.4.1.4146.10.1.1 Policy: 1.3.6.1.4.1.4146.1.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →