DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

kues.de · 185.125.172.4:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.kues.de
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Valid from
2026-06-05T00:00:00+00:00
Expires
2026-12-20T23:59:59+00:00
Days remaining
57
Serial (hex)
8BF84C396A6F62778BB89769FE6C3E4E
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.kues.de, DNS:kues.de

SHA-256 fingerprint

32:06:16:EE:52:1F:89:13:A0:A2:C9:AB:E0:B0:2F:61:5C:09:DD:21:8A:F4:06:EC:B0:E8:C5:A0:48:D2:F1:31
Certificate extensions & PEM
authorityKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
subjectKeyIdentifier
4E:F8:88:7E:2A:9B:44:2F:BD:65:74:64:5C:04:15:AA:9B:5F:D1:48
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.kues.de, DNS:kues.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 5 10:51:19.099 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:63:92:51:6C:00:C2:C7:0D:0D:FD:75:22: 9F:14:B4:F7:D3:30:30:D4:BE:52:7C:EB:8C:C7:A9:B7: 3E:06:F2:14:02:20:32:95:4D:F5:89:B4:43:FE:F7:27: 7B:D0:25:FC:29:CF:71:33:C8:D9:B0:AB:5C:BD:D8:A4: 0D:49:50:85:B6:CE Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Jun 5 10:51:19.181 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:93:77:C8:4B:7E:2A:58:CB:D4:B6:B2: 59:4F:C3:74:8A:50:DC:81:49:C6:7E:91:4F:44:C9:10: 29:C4:DF:2C:60:02:21:00:FE:ED:03:C3:6C:68:5C:0A: 67:02:CB:55:F7:F6:A1:E9:10:70:6C:A5:C1:05:F3:77: F8:16:BF:29:03:D0:5D:25 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jun 5 10:51:19.140 2026 GMT Extensions: 00:00:05:00:03:44:7E:CE Signature : ecdsa-with-SHA256 30:45:02:21:00:C4:69:90:27:7C:9F:FE:AA:E2:E4:12: 70:6D:CE:E4:06:40:02:67:E5:46:83:96:54:7F:53:27: 6D:73:A1:B1:3F:02:20:43:A3:61:64:CE:D9:16:A1:1A: BC:D8:1F:2A:E6:0F:90:75:45:55:19:ED:C5:AF:AE:B2: DB:22:84:D7:6E:B9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-24T19:07:02+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3436
Serial (hex)
397A66CC2756362E0DAA87CA6EABE3B1
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0
Certificate extensions & PEM
authorityKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
subjectKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----
MIIGTDCCBDSgAwIBAgIQOXpmzCdWNi4NqofKbqvjsTANBgkqhkiG9w0BAQwFADBf
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD
Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw
HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY
MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp
YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2MIIBojANBgkqhkiG9w0B
AQEFAAOCAY8AMIIBigKCAYEAljZf2HIz7+SPUPQCQObZYcrxLTHYdf1ZtMRe7Yeq
RPSwygz16qJ9cAWtWNTcuICc++p8Dct7zNGxCpqmEtqifO7NvuB5dEVexXn9RFFH
12Hm+NtPRQgXIFjx6MSJcNWuVO3XGE57L1mHlcQYj+g4hny90aFh2SCZCDEVkAja
EMMfYPKuCjHuuF+bzHFb/9gV8P9+ekcHENF2nR1efGWSKwnfG5RawlkaQDpRtZTm
M64TIsv/r7cyFO4nSjs1jLdXYdz5q3a4L0NoabZfbdxVb+CUEHfB0bpulZQtH1Rv
38e/lIdP7OTTIlZh6OYL6NhxP8So0/sht/4J9mqIGxRFc0/pC8suja+wcIUna0HB
pXKfXTKpzgis+zmXDL06ASJf5E4A2/m+Hp6b84sfPAwQ766rI65mh50S0Di9E3Pn
2WcaJc+PILsBmYpgtmgWTR9eV9otfKRUBfzHUHcVgarub/XluEpRlTtZudU5xbFN
xx/DgMrXLUAPaI60fZ6wA+PTAgMBAAGjggGBMIIBfTAfBgNVHSMEGDAWgBRWc1hk
lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQUaMASFhgOr872h6YyV6NGUV3LBycw
DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgEw
VAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdv
UHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290UjQ2LmNybDCBhAYIKwYBBQUH
AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp
Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYucDdjMCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA
YtOC9Fy+TqECFw40IospI92kLGgoSZGPOSQXMBqmsGWZUQ7rux7cj1du6d9rD6C8
ze1B2eQjkrGkIL/OF1s7vSmgYVafsRoZd/IHUrkoQvX8FZwUsmPu7amgBfaY3g+d
q1x0jNGKb6I6Bzdl6LgMD9qxp+3i7GQOnd9J8LFSietY6Z4jUBzVoOoz8iAU84OF
h2HhAuiPw1ai0VnY38RTI+8kepGWVfGxfBWzwH9uIjeooIeaosVFvE8cmYUB4TSH
5dUyD0jHct2+8ceKEtIoFU/FfHq/mDaVnvcDCZXtIgitdMFQdMZaVehmObyhRdDD
4NQCs0gaI9AAgFj4L9QtkARzhQLNyRf87Kln+YU0lgCGr9HLg3rGO8q+Y4ppLsOd
unQZ6ZxPNGIfOApbPVf5hCe58EZwiWdHIMn9lPP6+F404y8NNugbQixBber+x536
WrZhFZLjEkhp7fFXf9r32rNPfb74X/U90Bdy4lzp3+X1ukh1BuMxA/EEhDoTOS3l
7ABvc7BYSQubQ2490OcdkIzUh3ZwDrakMVrbaTxUM2p24N6dB+ns2zptWCva6jzW
r8IWKIMxzxLPv5Kt3ePKcUdvkBU/smqujSczTzzSjIoR5QqQA6lN1ZRSnuHIWCvh
JEltkYnTAH41QJ6SAWO66GrrUESwN/cgZzL4JLEqz1Y=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2021-03-22T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
799
Serial (hex)
E37CA2E9701E339C2F3FB0ED360FF90A
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CE:75:58:0B:C6:79:6D:3B:3E:A2:C3:E7:42:59:D0:D4:03:07:24:08:E9:60:C7:71:39:C2:FB:5A:3D:94:19:E4
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →