DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

kpn.com · 75.2.72.204:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.kpn.com
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Valid from
2026-08-28T00:00:00+00:00
Expires
2027-03-14T23:59:59+00:00
Days remaining
172
Serial (hex)
3BAA8F29482806DA128288A6407FB06E
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.kpn.com, DNS:kpn.com, DNS:kpn.nl, DNS:www.kpn.nl

SHA-256 fingerprint

21:65:D4:C3:9B:7B:12:AD:01:C4:1F:AD:F5:85:75:59:23:C0:ED:E5:A5:C6:61:14:EF:81:05:8D:C3:05:C5:51
Certificate extensions & PEM
authorityKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
subjectKeyIdentifier
01:09:0B:25:31:E8:A4:49:F8:88:CE:C0:6B:E9:4A:BD:28:D4:F2:C1
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Aug 28 10:55:16.032 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2C:A9:AE:17:04:72:EF:C8:A0:FD:8C:E6: CD:03:6D:2A:33:74:F8:FD:25:52:FA:CA:59:0F:59:D2: AB:80:CC:B6:02:21:00:AF:83:D5:F1:B4:98:E7:53:80: 21:14:8B:82:D0:55:BC:52:7D:FD:4E:B8:F2:CB:AC:30: 32:4E:F2:9F:03:14:33 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Aug 28 10:55:16.784 2026 GMT Extensions: 00:00:05:00:0B:69:B4:70 Signature : ecdsa-with-SHA256 30:45:02:21:00:82:63:93:6A:2A:0E:F6:25:24:D2:0D: 0D:B2:E0:A1:A5:68:A8:0B:12:E1:29:49:71:80:B3:AC: 2C:32:4B:41:EB:02:20:2C:B6:76:04:B6:A2:53:B2:9B: FA:F0:6A:74:9F:6B:4F:AD:99:7C:25:A4:D2:0A:84:38: 5B:3B:92:35:B8:31:D3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Aug 28 10:55:16.044 2026 GMT Extensions: 00:00:05:00:02:6B:AA:4D Signature : ecdsa-with-SHA256 30:45:02:20:24:C3:FC:FC:7A:A5:D2:FB:06:D8:F5:B3: 11:20:FD:92:45:DA:32:FE:E0:47:67:5E:FC:B8:EA:51: 82:AF:43:A6:02:21:00:95:1C:A3:0F:75:FC:81:CD:CD: 0E:FF:1F:F7:7D:00:B4:9E:E3:6A:FC:43:81:B5:90:F7: 44:AA:55:F6:31:9A:53
subjectAltName
DNS:www.kpn.com, DNS:kpn.com, DNS:kpn.nl, DNS:www.kpn.nl
-----BEGIN CERTIFICATE-----
MIIGkjCCBPqgAwIBAgIQO6qPKUgoBtoSgoimQH+wbjANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2
MB4XDTI2MDgyODAwMDAwMFoXDTI3MDMxNDIzNTk1OVowFjEUMBIGA1UEAxMLd3d3
Lmtwbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAn+wNptvf
hzpo+XJGNyYLAko/Yk+h6eMEG6qgVRESApgjlwptY1bK5v6jzoL3SxblWKOO9r8R
n42ma6RIeUSqdbRIwNzxl2MUJHrYtrZJiPJ4TfrHaTijwoyl+iP8ohH2i290qD7w
nD40CvI9IMi0T5aZUgDZwsCIXlyuYmBCVYeyrad8icN6bntMEmzZt7d95Ouz7YWI
e03N5sBvmx8vykCQ41JnCfvnWTENeJvZHIRVtiK5znaj2YbwNVCDmLXDVRJL9H4u
DQNq06A1kxfJInoAvbAlZatI87z6XhsiXdkWrLPQvcJbE/p4fWFgI+Swv79LbrRs
nQBgBKiqPiE/AgMBAAGjggMQMIIDDDAfBgNVHSMEGDAWgBRowBIWGA6vzvaHpjJX
o0ZRXcsHJzAdBgNVHQ4EFgQUAQkLJTHopEn4iM7Aa+lKvSjU8sEwDgYDVR0PAQH/
BAQDAgWgMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwSQYDVR0g
BEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3Rp
Z28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcw
AoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUHVibGljU2VydmVyQXV0
aGVudGljYXRpb25DQURWUjM2LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au
c2VjdGlnby5jb20wggGOBgorBgEEAdZ5AgQCBIIBfgSCAXoBeAB2AByfaCzp+vBF
aVD4G5aKh93bMhDYTObIsuOCUkrEz1mfAAABoEgCdkAAAAQDAEcwRQIgLKmuFwRy
78ig/YzmzQNtKjN0+P0lUvrKWQ9Z0quAzLYCIQCvg9XxtJjnU4AhFIuC0FW8Un39
Trjyy6wwMk7ynwMUMwB+AI7KRwus3mrzogawpHqEt0b+H8a/lT4l5ptO5AJI88bo
AAABoEgCeTAACAAABQALabRwBAMARzBFAiEAgmOTaioO9iUk0g0NsuChpWioCxLh
KUlxgLOsLDJLQesCICy2dgS2olOym/rwanSfa0+tmXwlpNIKhDhbO5I1uDHTAH4A
WW5sM4aUsllyolbIoOjdkEp26Ag92oc7AQg4KBQ87lkAAAGgSAJ2TAAIAAAFAAJr
qk0EAwBHMEUCICTD/Px6pdL7Btj1sxEg/ZJF2jL+4EdnXvy46lGCr0OmAiEAlRyj
D3X8gc3NDv8f930AtJ7javxDgbWQ90SqVfYxmlMwMwYDVR0RBCwwKoILd3d3Lmtw
bi5jb22CB2twbi5jb22CBmtwbi5ubIIKd3d3Lmtwbi5ubDANBgkqhkiG9w0BAQsF
AAOCAYEAFr4zpf8+wAAxbdSwX+rfedpxhjF4IFMEt1zVPDzMt5K6BPkUUk11y/wG
0X7sapC47uzyQ7O4qKSngEdu6H+XFs1POCjDVmabgWHmyH5OFGX3XfqcLNl9eTzj
4HihI56+P6Hfcv3UuKI9forxBXMOU/bUZYyjfKzxhEx79Sg+XeHZfatCuD7k1twA
SsUOaQenMo0zeg2eIPaX2rbifgMMbZFs5fcrt0UTr+Ep2fCd508xkLsn4yZ2yxjr
1ZHeH22Fe10dUQ4JOxbN5lloQ4C3+gvrYk++zVcXAH80NnMsOq5s6fx+NkA4XnKa
gxJAbWlLECH6CQmv5uudxeFnk0weCCodzZDVFXLL1jfi+0MpA7XvECnxfxEh5ZTa
wlwqhloQGFle/s6t/mkCaKb7BA2rnigpcmaNmqPThpKHsWZkYts+gqX1jocsA6s1
G0bQKaZzXdHKrTUisf1xk5gIaOIJdqtIVtilcj/VFqRNjSu7h33Uvg3eEzQl6Iy4
Z0C1zXaj
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-23T02:42:05+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3467
Serial (hex)
397A66CC2756362E0DAA87CA6EABE3B1
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →