DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

knipp.de · 195.253.54.7:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE L=Dortmund O=Knipp Medien und Kommunikation GmbH CN=*.knipp.de
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Valid from
2026-01-07T00:00:00+00:00
Expires
2027-01-09T23:59:59+00:00
Days remaining
109
Serial (hex)
0A25FA00DFC3DE68F6C03661E1408F70
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.knipp.de, DNS:knipp.de

SHA-256 fingerprint

ED:70:D9:FA:A3:98:3B:53:56:8E:8E:2C:DB:81:6D:88:25:53:16:24:76:29:F4:B0:95:E2:82:6F:9A:F7:84:CC
Certificate extensions & PEM
authorityKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
subjectKeyIdentifier
FE:45:7F:9F:23:70:9B:C1:71:55:AB:EC:91:19:54:6A:A3:E5:DC:0E
subjectAltName
DNS:*.knipp.de, DNS:knipp.de
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 7 15:28:57.864 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C2:F4:5E:22:D7:E3:08:51:23:64:22: 77:E8:BA:4E:6A:9B:93:22:BA:0F:2D:13:7C:BB:FA:04: 66:53:AE:23:83:02:21:00:C4:05:5F:DA:4E:A8:57:E7: 63:B3:DA:CC:90:0C:79:98:DE:FA:0C:C8:C2:64:88:C1: A5:74:B5:D6:94:1E:94:B5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 7 15:28:57.868 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:55:F4:C5:AD:E6:F4:93:AD:49:C6:9F:B1: B6:48:8A:FF:56:BD:54:F9:8E:5A:B0:94:81:86:23:EC: 7C:8A:E2:31:02:21:00:D5:75:B9:F2:19:58:63:39:B3: 84:98:18:55:CB:8D:A5:50:CF:40:7C:57:70:EC:F9:A1: B0:34:1B:37:4E:5E:38 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 7 15:28:58.014 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D0:81:EF:AF:72:7C:8A:B4:9B:7B:1C: AF:BE:5E:7F:99:ED:B1:23:2C:75:1C:94:D5:AE:67:CA: C0:8B:9D:EF:D5:02:20:09:26:D6:C4:ED:51:EA:06:C5: EB:06:AD:B9:A8:E2:E1:F1:A5:31:6B:FF:C3:A8:47:45: 1B:91:11:CB:21:B9:0F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-22T18:24:56+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:23:37+00:00
Expires
2027-11-02T12:23:37+00:00
Days remaining
405
Serial (hex)
0D07782A133FC6F9A57296E131FFD179
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
Certificate extensions & PEM
subjectKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →