DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

lemarit.de · 185.235.37.1:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=lemarit.de
Issuer
C=US O=DigiCert, Inc. CN=Encryption Everywhere G3 TLS ECC P384 SHA384 2023 CA1
Valid from
2026-09-19T00:00:00+00:00
Expires
2027-04-05T23:59:59+00:00
Days remaining
180
Serial (hex)
0167CC50D9B095AABEA34184A5BA64E5
Signature
ecdsa-with-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

DNS:lemarit.de

SHA-256 fingerprint

3F:B1:90:A4:4D:ED:73:15:E3:CC:AA:78:CC:C9:76:4D:AB:2D:27:02:DD:FC:F0:CE:49:A4:F6:74:18:AC:53:D5
Certificate extensions & PEM
authorityKeyIdentifier
85:AD:24:14:28:40:EE:BA:F5:24:CF:12:C4:E7:AC:AE:D0:0C:CB:7D
subjectKeyIdentifier
7B:BE:B2:2D:EE:7D:3B:47:C1:73:29:97:0B:2E:48:3D:9B:1E:5E:5A
subjectAltName
DNS:lemarit.de
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/EncryptionEverywhereG3TLSECCP384SHA3842023CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 19 00:16:02.956 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8D:B3:0E:3A:F5:51:25:E0:01:EF:D7: B1:8B:44:D6:19:33:63:AC:CC:E8:8C:73:B9:4D:83:01: C0:E5:C7:D2:FE:02:21:00:D7:57:5B:7A:88:B0:BE:6A: CA:06:F6:B4:E4:D7:2D:26:71:68:D8:D8:D8:60:A2:3F: 34:53:B7:28:85:82:08:02 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Sep 19 00:16:02.940 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C7:73:17:FC:B5:76:31:67:E8:2B:E9: 2D:DB:16:00:1A:DD:44:31:15:4C:57:D5:D2:C5:39:7E: 1F:14:4C:19:BD:02:20:35:47:4F:00:D3:43:03:34:4F: 76:39:A1:DF:D7:EA:DD:B0:28:FD:F0:04:BB:3B:C0:C8: 85:A0:23:B4:46:7B:83 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Sep 19 00:16:03.016 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A4:F1:EB:CB:F1:CA:1D:FD:F9:D1:B8: BC:13:92:96:58:16:BF:F5:F6:93:BA:C9:57:88:3E:BB: DC:22:30:FD:34:02:21:00:AA:4C:AB:07:F6:B5:22:DA: B4:1B:78:8A:24:9C:0A:12:FB:B4:7E:73:10:91:74:79: 73:D8:75:2E:48:0F:5B:2E
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-07T05:54:19+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert, Inc. CN=Encryption Everywhere G3 TLS ECC P384 SHA384 2023 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2023-02-02T00:00:00+00:00
Expires
2033-02-01T23:59:59+00:00
Days remaining
2309
Serial (hex)
02B20A412D8F34683BCDE248DFC1884A
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

DA:1F:7C:BF:32:2E:55:CC:08:22:76:F8:51:91:47:DF:A1:E8:0C:BA:F7:D5:79:9F:F7:71:35:88:32:ED:17:12
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
85:AD:24:14:28:40:EE:BA:F5:24:CF:12:C4:E7:AC:AE:D0:0C:CB:7D
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4118
Serial (hex)
055556BCF25EA43535C3A40FD5AB4572
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →