THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

loomis.com · 194.68.192.44:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.loomis.com
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS ECC CA G1
Valid from
2025-12-03T00:00:00+00:00
Expires
2027-01-01T23:59:59+00:00
Days remaining
68
Serial (hex)
05DE68289DD2F78B1117F60464AEEBCD
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.loomis.com, DNS:loomis.com

SHA-256 fingerprint

38:E6:3C:40:46:D1:D2:9D:A9:E7:3F:AB:D8:16:FB:82:6A:D6:3D:8F:9F:C2:7F:E4:28:D1:08:0E:DB:F8:D0:35
Certificate extensions & PEM
authorityKeyIdentifier
BD:82:CF:47:7B:1E:8C:22:85:FE:8C:A8:1F:C3:E1:B2:DF:FD:A6:99
subjectKeyIdentifier
95:D1:F8:E9:18:28:0F:27:A4:F6:A7:51:C8:27:5D:4D:90:D2:D7:DE
subjectAltName
DNS:*.loomis.com, DNS:loomis.com
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSECCCAG1.crl
authorityInfoAccess
OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Dec 3 17:15:47.807 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F7:A7:65:0C:EB:26:54:1D:CF:AB:7A: D1:E7:2F:B2:3A:BE:3C:CD:DF:30:48:5A:74:D4:3E:AB: 7D:15:DD:21:A1:02:20:2E:C7:76:71:7E:32:A8:21:7D: 43:FC:21:30:C9:43:84:36:C4:04:08:70:E3:C1:6D:56: 81:A1:2C:17:4D:F6:62 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Dec 3 17:15:47.857 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E7:59:4A:AB:D4:38:50:1E:93:84:78: 05:3E:24:BE:D8:B8:64:C8:E9:2F:9E:B7:AB:E4:EB:E5: 59:4A:42:E0:28:02:21:00:DF:09:F7:30:C2:F2:D7:55: 05:01:B3:57:52:43:7E:84:31:C3:CD:1B:E5:3F:12:78: C3:6F:04:30:E7:44:8E:0B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Dec 3 17:15:47.818 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:81:E0:D9:15:15:44:D6:EF:04:4C:E1: 0D:EE:8F:EC:DA:15:84:E0:73:FE:4A:D3:3B:29:66:AF: 1A:44:0E:67:40:02:20:75:CD:5F:68:B3:97:74:F3:7B: 91:53:9D:4B:BC:94:B4:DB:D6:52:A8:17:94:F9:16:B5: 19:2C:C8:F5:45:0F:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-25T01:31:18+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS ECC CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2017-11-02T12:59:38+00:00
Expires
2027-11-02T12:59:38+00:00
Days remaining
373
Serial (hex)
034A3FF947BE39C199CEB806961E516D
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A8:38:40:5E:BB:03:F5:DF:D8:D4:A9:57:2A:E6:E0:E3:F3:56:EC:4E:C1:34:37:5A:59:DB:7B:19:5D:C3:EC:44
Certificate extensions & PEM
subjectKeyIdentifier
BD:82:CF:47:7B:1E:8C:22:85:FE:8C:A8:1F:C3:E1:B2:DF:FD:A6:99
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4100
Serial (hex)
055556BCF25EA43535C3A40FD5AB4572
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
-----BEGIN CERTIFICATE-----
MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe
Fw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVTMRUw
EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x
IDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0CAQYF
K4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FG
fp4tn+6OYwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPO
Z9wj/wMco+I+o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAd
BgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNpYim8S8YwCgYIKoZIzj0EAwMDaAAwZQIx
AK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y3maTD/HMsQmP3Wyr+mt/
oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8
sycX
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →