DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nato.int · 151.101.3.10:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=BE ST=Brussels L=Brussels O=NATO CN=aem.nato.int
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2026-02-23T13:16:17+00:00
Expires
2027-03-27T13:16:16+00:00
Days remaining
151
Serial (hex)
34C24CF2D1818B9D28B3388C
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:aem.nato.int, DNS:nato.int, DNS:preview.nato.int, DNS:www.aem.nato.int, DNS:www.nato.int

SHA-256 fingerprint

A2:36:95:42:B5:EC:59:48:69:39:8B:EC:95:AB:3F:9C:80:DA:A3:2F:22:69:12:60:6B:A9:A0:02:2A:35:89:95
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsrsaovsslca2018.crl
subjectAltName
DNS:aem.nato.int, DNS:nato.int, DNS:preview.nato.int, DNS:www.aem.nato.int, DNS:www.nato.int
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
87:DA:A8:67:E8:20:0A:C8:BE:E0:E0:BB:FD:B6:A4:6C:05:10:DF:0B
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Feb 23 13:16:22.531 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C4:1B:74:B9:5A:8E:C0:25:F7:CE:50: 51:DB:D4:B4:DC:B2:61:A8:0D:21:13:E6:F5:5E:C0:A0: 1D:39:D5:C4:7C:02:21:00:93:01:8D:14:D5:1D:3F:75: 8F:C7:A9:35:9B:BF:0B:0C:E8:F8:2F:93:3C:0C:7B:99: 08:79:96:F0:4D:C7:DD:64 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 23 13:16:21.826 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D6:7D:F6:6C:83:B7:2B:CA:7F:B6:D8: 26:24:9A:11:21:B3:66:1B:B0:B2:66:E3:E3:F1:6D:FC: F4:ED:53:64:19:02:21:00:AD:66:48:6C:93:08:E4:2E: 9F:B4:D2:FC:19:96:DA:47:B6:31:0F:09:5E:80:EF:28: 4C:A9:18:82:CA:51:F8:72 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Feb 23 13:16:22.735 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:83:7D:62:A5:48:E8:C4:E3:CE:CF:54: 9A:81:29:70:F9:3C:DF:12:21:21:05:68:45:05:30:12: 97:C6:16:60:DD:02:20:1E:DB:54:DF:F5:92:90:FE:AE: FA:8D:6F:21:FD:1B:80:5C:DE:A4:DE:38:C0:A7:44:6D: D2:A0:8C:12:1A:7D:07
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgIMNMJM8tGBi50osziMMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNjAyMjMxMzE2MTdaFw0y
NzAzMjcxMzE2MTZaMFkxCzAJBgNVBAYTAkJFMREwDwYDVQQIEwhCcnVzc2VsczER
MA8GA1UEBxMIQnJ1c3NlbHMxDTALBgNVBAoTBE5BVE8xFTATBgNVBAMTDGFlbS5u
YXRvLmludDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMkIcrK9Tl2G
dfJ8iBF8PHm4wxhiZtx1znXBG0IdLHTbN4uVN/mpdu01BuZZaMVsV/Qjjxn/X4MI
NFsInAHplHO6ALUHAUhthSxowEnJ+WZ8H7D4HM1ofS82sOF9xgdCXFhi9Cctq3Tb
25F+tRkpABSjBwsuIeobph03kgmxi/nuRayse0sORcJ3CRUrQG05HMqKMvrs+zYO
P3XaJM0GPC5lf2T3R/0JX4Hco4Ag69xaY+grmbFod2TGQ1TARJhuVdMte3ci3Lhw
mUqjv8vvYtDfJkmuTaNMt9y9BuCEg2MuAEs5ZDhvzGwSQr17jKO1CYokZChgfqTC
RkewxqFB9s0CAwEAAaOCA4QwggOAMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E
AjAAMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJl
Lmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3Bggr
BgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNh
MjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRw
czovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwPwYD
VR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYW92
c3NsY2EyMDE4LmNybDBTBgNVHREETDBKggxhZW0ubmF0by5pbnSCCG5hdG8uaW50
ghBwcmV2aWV3Lm5hdG8uaW50ghB3d3cuYWVtLm5hdG8uaW50ggx3d3cubmF0by5p
bnQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjv
f/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBSH2qhn6CAKyL7g4Lv9tqRsBRDf
CzCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAHJ9oLOn68EVpUPgbloqH3dsy
ENhM5siy44JSSsTPWZ8AAAGciqTOgwAABAMASDBGAiEAxBt0uVqOwCX3zlBR29S0
3LJhqA0hE+b1XsCgHTnVxHwCIQCTAY0U1R0/dY/HqTWbvwsM6PgvkzwMe5kIeZbw
TcfdZAB3AExj3JjlnB2riPYeij3ero+rRKM3e1+blMP7oZz8wb4mAAABnIqky8IA
AAQDAEgwRgIhANZ99myDtyvKf7bYJiSaESGzZhuwsmbj4/Ft/PTtU2QZAiEArWZI
bJMI5C6ftNL8GZbaR7YxDwlegO8oTKkYgspR+HIAdgBgTJqven93XwHUBvySDciZ
6wscffjJUhv6+hd3O5eLyQAAAZyKpM9PAAAEAwBHMEUCIQCDfWKlSOjE487PVJqB
KXD5PN8SISEFaEUFMBKXxhZg3QIgHttU3/WSkP6u+o1vIf0bgFzepN44wKdEbdKg
jBIafQcwDQYJKoZIhvcNAQELBQADggEBAH/2C2Ifwpk7NTyopcxfoGBI/deoFYSA
EI3DtmBble20HFdCKvLnWw94gL6REJgfYxpdxbjw0VhV3EpNE3U5OzobL1IIzSJW
Au7FQxW6buRd/M6fgHqGJrbaJORIBrmVRCQfZxUhfTPgA3m0k/c2OE3Qt3mzYwLF
lGLQD/0re2WnQYtc6n62FN6n/cFatypyi2qso7NwfBghpLXsOT0X4OF178iRsQL/
r0k5GhzeaAWTtgSb/Qz38U++RtE2VRD5YxBVJ2CEdlG0tJfhDTTvyS4lzlKvwKzm
eAcjl//wbbOD/2vLNoy64i5LyPto2N74aCdeIUJMW1Ukf7EuU/2rnVk=
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-27T10:44:13+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
755
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →