THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

mazdausa.com · 108.166.29.54:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=California L=Irvine O=Mazda North American Operations CN=*.mazdausa.com
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Valid from
2025-12-02T00:00:00+00:00
Expires
2026-12-01T23:59:59+00:00
Days remaining
37
Serial (hex)
0692548A1F8B3D56BA082ACCE7F303C1
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.mazdausa.com, DNS:mazdausa.com

SHA-256 fingerprint

BF:81:F7:F5:58:6C:FD:5D:62:42:D7:7B:76:55:C5:F4:E0:0A:6F:BD:59:05:94:0E:65:40:96:12:5C:90:EF:A2
Certificate extensions & PEM
authorityKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
subjectKeyIdentifier
66:0C:6C:46:DE:C9:98:9B:58:83:3A:C4:3F:B3:3E:A2:F4:97:F8:45
subjectAltName
DNS:*.mazdausa.com, DNS:mazdausa.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Dec 2 23:01:08.165 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DF:7B:14:62:D4:3E:68:FE:F8:99:67: 43:E9:EE:AE:95:A6:04:32:2D:3B:FE:D7:92:CB:D3:07: 20:D8:6E:2D:B3:02:20:23:13:5E:DB:67:E9:DE:3B:C1: BD:44:DF:8E:B1:07:45:13:85:0B:22:7B:A1:36:B7:1A: 54:0E:27:0A:93:36:E0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Dec 2 23:01:08.226 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:2F:B2:03:74:70:DE:F2:23:13:60:96:3F: 55:AF:C6:15:67:F8:CE:FB:69:1E:83:01:D6:A3:2C:B4: FA:A2:90:23:02:20:6C:45:15:12:86:48:72:45:3F:78: BA:D5:52:C1:E4:51:4C:8F:07:39:0F:69:85:7B:94:95: EB:B7:57:F4:1B:A7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Dec 2 23:01:08.037 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C0:66:6D:C5:F2:BF:42:80:B0:E9:48: 78:99:8D:7A:D1:A1:66:80:E9:D4:A0:54:13:92:B3:06: 8B:A2:33:0E:AD:02:21:00:B7:3C:0C:90:4D:B6:41:67: E0:63:D3:E9:3E:BA:19:78:BA:F7:E7:00:14:9F:46:6F: 10:30:11:40:0C:30:C1:2C
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIQBpJUih+LPVa6CCrM5/MDwTANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTI1MTIwMjAwMDAwMFoXDTI2MTIwMTIzNTk1OVowdjELMAkGA1UEBhMCVVMx
EzARBgNVBAgTCkNhbGlmb3JuaWExDzANBgNVBAcTBklydmluZTEoMCYGA1UEChMf
TWF6ZGEgTm9ydGggQW1lcmljYW4gT3BlcmF0aW9uczEXMBUGA1UEAwwOKi5tYXpk
YXVzYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyfNdm9dk
T0ql73Zsvutx11rd3D+T7FXF3NL+OLFw1HY/ozK1dPIAOJ6jG7YWVw7dQSbPgSJV
Xisujzsx3bLJzY93FMQtsPA3b+E7YvWqaz9sH7YOeOCzKPKYmXD/Mn+wTyuiJ/Gt
GOQx0ZndwgYxcrSA5SpzVErIiEjjPiTSK16OkUJaLBhul4tHqSVH6WDlhhqsqRba
rd/n6T/ft1P8uQ5JG3K2rXyYoxBaXpZs+gdK1CuwjD39mdB9Tr1xemPDWqUV+eGC
QImZKjXnHRHxYbA6p/MtYewsETesHGK3ipeWnAlLvFZLhmvs/Qfkukv8BqvIyiV8
iHpKmqoJs/JzAgMBAAGjggMbMIIDFzAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y
+QDvo74CVzAdBgNVHQ4EFgQUZgxsRt7JmJtYgzrEP7M+ovSX+EUwJwYDVR0RBCAw
HoIOKi5tYXpkYXVzYS5jb22CDG1hemRhdXNhLmNvbTA+BgNVHSAENzA1MDMGBmeB
DAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMD8GA1UdHwQ4MDYw
NKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FH
MS5jcmwwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVz
Lmdlb3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1
c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwDAYDVR0TAQH/BAIwADCCAX4G
CisGAQQB1nkCBAIEggFuBIIBagFoAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYP
FdEucrtFSxQAAAGa4UxXxQAABAMARzBFAiEA33sUYtQ+aP74mWdD6e6ulaYEMi07
/teSy9MHINhuLbMCICMTXttn6d47wb1E346xB0UThQsie6E2txpUDicKkzbgAHUA
r2eIO1ewTt2Pptl+9i6o64EKx3Fg8CReVdYML+eFhzoAAAGa4UxYAgAABAMARjBE
AiAvsgN0cN7yIxNglj9Vr8YVZ/jO+2kegwHWoyy0+qKQIwIgbEUVEoZIckU/eLrV
UsHkUUyPBzkPaYV7lJXrt1f0G6cAdwDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1
rXaa2Q5SzQAAAZrhTFdFAAAEAwBIMEYCIQDAZm3F8r9CgLDpSHiZjXrRoWaA6dSg
VBOSswaLojMOrQIhALc8DJBNtkFn4GPT6T66GXi69+cAFJ9GbxAwEUAMMMEsMA0G
CSqGSIb3DQEBCwUAA4IBAQB8xNaBKQq32UezuT9LVonrufUtDA60S2xIOKREfvwU
Fl9G0aZX4K1aMHjOg8wCkpKBM2BX6lO1YWGA6lH5FzXDMI/+4HQ5AC7OT6vMJ9NI
yukF74liY9L4bXyuzd0zriOJCa2WLBjz3diIcdK0d0wqVpmxXs4I/jBEj9tuCGjm
WW9qD6vLvXzVEcrnHGSSZuSlwnV+pIu/T2bh87L+SAQydEKHck1pfumBgTxhE3p9
XZLf3PpSZz2dxrCB/rv/4Gs7wMb8sNndivwty4Gy9Ry3ax/1Bqa7N4MlHSHcbjt9
qxNe20au7/Zq7/hj9yHDnq5KLh4tJFDucjBUj2z/2hJo
-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-25T21:18:20+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:23:37+00:00
Expires
2027-11-02T12:23:37+00:00
Days remaining
372
Serial (hex)
0D07782A133FC6F9A57296E131FFD179
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
Certificate extensions & PEM
subjectKeyIdentifier
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →