DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nerdscave.de · 95.214.172.31:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
CN=nerdscave.de
Issuer
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Valid from
2024-10-29T00:00:00+00:00
Expires
2025-10-30T23:59:59+00:00
Days remaining
-351
Serial (hex)
022BEA5BF97F2CA2A4516E9D67A60A82
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:nerdscave.de, DNS:www.nerdscave.de

SHA-256 fingerprint

DF:A3:86:E0:DF:D4:EC:AE:6C:D9:A0:A6:A8:57:6E:A2:05:4F:DB:91:5E:3F:1F:BC:86:44:2E:55:C8:CA:E6:AB
Certificate extensions & PEM
authorityKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
A1:27:73:45:F2:8E:FB:C7:CB:9C:EC:FF:E6:59:D5:04:08:0F:DB:60
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:nerdscave.de, DNS:www.nerdscave.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8: 3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A Timestamp : Oct 29 22:40:12.035 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:55:06:1A:6B:F0:1E:1F:CC:C4:3D:BE:61: 20:A7:E3:90:78:22:50:69:04:FE:19:78:17:4E:50:17: 07:70:06:D1:02:21:00:BF:0F:63:FD:AD:97:40:1E:9E: E6:29:06:51:3E:2A:72:51:98:3B:E9:35:7A:C3:5A:6F: C0:02:E1:2C:E7:00:18 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C: 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0 Timestamp : Oct 29 22:40:11.966 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:9C:CB:82:DC:ED:4C:23:30:4B:E9:CB: F4:3A:1C:1D:B5:32:23:B5:2B:49:98:FE:31:CD:C3:E7: 21:5F:3B:FC:CE:02:20:10:79:7F:9B:74:8A:B7:CE:28: E9:1B:0B:A5:97:80:27:1F:D2:F1:02:AA:3D:81:18:6A: FF:29:07:FB:32:EA:22 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13: F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A Timestamp : Oct 29 22:40:11.922 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4D:34:4D:9E:C7:BB:ED:4D:F5:B5:9E:0E: 60:89:66:97:70:5D:CA:4E:F3:DB:57:02:A6:45:09:8C: 9D:C2:31:A5:02:21:00:E0:44:1A:66:DB:D1:C8:16:1A: C4:E5:48:B0:D7:FD:72:A8:09:2A:98:8C:37:A2:A2:A0: 99:F3:D4:F1:ED:40:CC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-16T03:01:11+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1537
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIGEzCCA/ugAwIBAgIQfVtRJrR2uhHbdBYLvFMNpzANBgkqhkiG9w0BAQwFADCB
iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTgx
MTAyMDAwMDAwWhcNMzAxMjMxMjM1OTU5WjCBjzELMAkGA1UEBhMCR0IxGzAZBgNV
BAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UE
ChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFJTQSBEb21haW4g
VmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1nMz1tc8INAA0hdFuNY+B6I/x0HuMjDJsGz99J/LEpgPLT+N
TQEMgg8Xf2Iu6bhIefsWg06t1zIlk7cHv7lQP6lMw0Aq6Tn/2YHKHxYyQdqAJrkj
eocgHuP/IJo8lURvh3UGkEC0MpMWCRAIIz7S3YcPb11RFGoKacVPAXJpz9OTTG0E
oKMbgn6xmrntxZ7FN3ifmgg0+1YuWMQJDgZkW7w33PGfKGioVrCSo1yfu4iYCBsk
Haswha6vsC6eep3BwEIc4gLw6uBK0u+QDrTBQBbwb4VCSmT3pDCg/r8uoydajotY
uK3DGReEY+1vVv2Dy2A0xHS+5p3b4eTlygxfFQIDAQABo4IBbjCCAWowHwYDVR0j
BBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFI2MXsRUrYrhd+mb
+ZsF4bgBjWHhMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAbBgNVHSAEFDASMAYGBFUdIAAw
CAYGZ4EMAQIBMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRydXN0
LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDB2Bggr
BgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0LmNv
bS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZaHR0cDov
L29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAMr9hvQ5Iw0/H
ukdN+Jx4GQHcEx2Ab/zDcLRSmjEzmldS+zGea6TvVKqJjUAXaPgREHzSyrHxVYbH
7rM2kYb2OVG/Rr8PoLq0935JxCo2F57kaDl6r5ROVm+yezu/Coa9zcV3HAO4OLGi
H19+24rcRki2aArPsrW04jTkZ6k4Zgle0rj8nSg6F0AnwnJOKf0hPHzPE/uWLMUx
RP0T7dWbqWlod3zu4f+k+TY4CFM5ooQ0nBnzvg6s1SQ36yOoeNDT5++SR2RiOSLv
xvcRviKFxmZEJCaOEDKNyJOuB56DPi/Z+fVGjmO+wea03KbNIaiGCpXZLoUmGv38
sbZXQm2V0TP2ORQGgkE49Y9Y3IBbpNV9lXj9p5v//cWoaasm56ekBYdbqbe4oyAL
l6lFhd2zi+WJN44pDfwGF/Y4QA5C5BIG+3vzxhFoYt/jmPQT2BVPi7Fp2RBgvGQq
6jG35LWjOhSbJuMLe/0CjraZwTiXWTb2qHSihrZe68Zk6s+go/lunrotEbaGmAhY
LcmsJWTyXnW0OMGuf1pGg+pRyrbxmRE1a6Vqe8YAsOf4vmSyrcjC8azjUeqkk+B5
yOGBQMkKW+ESPMFgKuOXwIlCypTPRpgSabuY0MLTDXJLR27lk8QyKGOHQ+SwMj4K
00u/I5sUKUErmgQfky3xxzlIPK1aEn8=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=GB ST=Greater Manchester L=Salford O=Comodo CA Limited CN=AAA Certificate Services
Valid from
2019-03-12T00:00:00+00:00
Expires
2028-12-31T23:59:59+00:00
Days remaining
807
Serial (hex)
3972443AF922B751D7D36C10DD313595
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

68:B9:C7:61:21:9A:5B:1F:01:31:78:44:74:66:5D:B6:1B:BD:B1:09:E0:0F:05:CA:9F:74:24:4E:E5:F5:F5:2B
Certificate extensions & PEM
authorityKeyIdentifier
A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.comodoca.com/AAACertificateServices.crl
authorityInfoAccess
OCSP - URI:http://ocsp.comodoca.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →