DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

netflix.com · 18.200.8.190:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=California L=Los Gatos O=Netflix CN=www.netflix.com
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-02-18T00:00:00+00:00
Expires
2027-02-18T21:41:48+00:00
Days remaining
149
Serial (hex)
05B22F84CE2AD0E52D718890C29072AB
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:account.netflix.com, DNS:ca.netflix.com, DNS:develop-stage.netflix.com, DNS:embed.develop-stage.netflix.com, DNS:embed.release-stage.netflix.com, DNS:netflix.ca, DNS:netflix.com, DNS:release-stage.netflix.com, DNS:signup.netflix.com, DNS:tv.netflix.com, DNS:www.netflix.ca, DNS:www.netflix.com, DNS:www1.netflix.com, DNS:www2.netflix.com, DNS:www3.netflix.com

SHA-256 fingerprint

A5:F1:68:2E:76:B7:F0:50:EE:CA:63:9A:DD:23:A4:09:F1:FE:D3:4E:0B:8A:07:9A:A0:D9:DC:D5:6E:B6:E0:F7
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
FD:B7:28:4B:C2:81:86:E6:9B:4D:14:00:D5:66:31:3E:FA:6E:51:A5
subjectAltName
DNS:account.netflix.com, DNS:ca.netflix.com, DNS:develop-stage.netflix.com, DNS:embed.develop-stage.netflix.com, DNS:embed.release-stage.netflix.com, DNS:netflix.ca, DNS:netflix.com, DNS:release-stage.netflix.com, DNS:signup.netflix.com, DNS:tv.netflix.com, DNS:www.netflix.ca, DNS:www.netflix.com, DNS:www1.netflix.com, DNS:www2.netflix.com, DNS:www3.netflix.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 18 21:41:52.474 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5C:80:A7:2D:BA:E2:F7:DB:79:28:E8:9C: 45:CF:21:19:AD:68:DB:6C:D8:E5:E8:26:27:61:8A:99: 5E:16:D8:C0:02:20:67:9E:D9:A2:87:CC:3F:72:A6:1D: F6:5A:59:49:E2:6C:FC:33:7A:32:20:4E:EE:60:B6:23: F5:15:2D:73:04:2F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Feb 18 21:41:52.608 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DF:68:80:79:81:40:3B:B8:02:86:33: C9:1E:FF:BE:90:90:54:37:DD:BE:A1:BF:59:F4:8E:83: 56:95:47:5B:A7:02:21:00:BF:D0:6B:75:43:FF:DF:13: 2E:AD:E6:D8:2E:5B:14:64:F9:F6:33:6B:08:5F:CD:D5: 6F:9F:70:B2:0A:F1:02:4D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Feb 18 21:41:52.511 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:56:08:EA:73:69:2B:8A:35:6F:32:4E:48: 0F:4F:0A:3D:FB:CB:FE:1C:A3:63:43:29:22:C8:68:F0: ED:14:04:8C:02:21:00:87:FC:22:DA:55:AD:B4:D4:8B: 15:CE:3B:E9:12:50:A9:3F:6F:47:67:DA:13:31:50:D0: 12:B7:DA:8E:25:4C:E7
-----BEGIN CERTIFICATE-----
MIIGgjCCBgigAwIBAgIQBbIvhM4q0OUtcYiQwpByqzAKBggqhkjOPQQDAzBZMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdp
Q2VydCBHbG9iYWwgRzMgVExTIEVDQyBTSEEzODQgMjAyMCBDQTEwHhcNMjYwMjE4
MDAwMDAwWhcNMjcwMjE4MjE0MTQ4WjBiMQswCQYDVQQGEwJVUzETMBEGA1UECBMK
Q2FsaWZvcm5pYTESMBAGA1UEBxMJTG9zIEdhdG9zMRAwDgYDVQQKEwdOZXRmbGl4
MRgwFgYDVQQDEw93d3cubmV0ZmxpeC5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMB
BwNCAASPqB0c/7hCFnvUoDLEwAZx7/ld9dx44KSUX8tjBdUGC+fF5XszdKF8IwP/
J2BKyVcRbTGjeByJ5Aon+r0ao4nMo4IEpzCCBKMwHwYDVR0jBBgwFoAUiiPrnmvX
+Tdd+W0hOXaaoWfeEKgwHQYDVR0OBBYEFP23KEvCgYbmm00UANVmMT76blGlMIIB
PgYDVR0RBIIBNTCCATGCE2FjY291bnQubmV0ZmxpeC5jb22CDmNhLm5ldGZsaXgu
Y29tghlkZXZlbG9wLXN0YWdlLm5ldGZsaXguY29tgh9lbWJlZC5kZXZlbG9wLXN0
YWdlLm5ldGZsaXguY29tgh9lbWJlZC5yZWxlYXNlLXN0YWdlLm5ldGZsaXguY29t
ggpuZXRmbGl4LmNhggtuZXRmbGl4LmNvbYIZcmVsZWFzZS1zdGFnZS5uZXRmbGl4
LmNvbYISc2lnbnVwLm5ldGZsaXguY29tgg50di5uZXRmbGl4LmNvbYIOd3d3Lm5l
dGZsaXguY2GCD3d3dy5uZXRmbGl4LmNvbYIQd3d3MS5uZXRmbGl4LmNvbYIQd3d3
Mi5uZXRmbGl4LmNvbYIQd3d3My5uZXRmbGl4LmNvbTA+BgNVHSAENzA1MDMGBmeB
DAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
DgYDVR0PAQH/BAQDAgOIMBMGA1UdJQQMMAoGCCsGAQUFBwMBMIGfBgNVHR8EgZcw
gZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2Jh
bEczVExTRUNDU0hBMzg0MjAyMENBMS0yLmNybDBIoEagRIZCaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzNUTFNFQ0NTSEEzODQyMDIwQ0Ex
LTIuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzNUTFNFQ0NTSEEzODQyMDIwQ0ExLTIuY3J0
MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AExj3Jjl
nB2riPYeij3ero+rRKM3e1+blMP7oZz8wb4mAAABnHKzztoAAAQDAEYwRAIgXICn
Lbri99t5KOicRc8hGa1o22zY5egmJ2GKmV4W2MACIGee2aKHzD9yph32WllJ4mz8
M3oyIE7uYLYj9RUtcwQvAHcA1tWNqdAXU/NqSqDHV0kCr+vH3CzTjNn3ZMgMiRke
nwIAAAGccrPPYAAABAMASDBGAiEA32iAeYFAO7gChjPJHv++kJBUN92+ob9Z9I6D
VpVHW6cCIQC/0Gt1Q//fEy6t5tguWxRk+fYzawhfzdVvn3CyCvECTQB2AETCvQzp
FA5kpclKAZMKWqG7NZcOAO4RFoloKhxE17VmAAABnHKzzv8AAAQDAEcwRQIgVgjq
c2krijVvMk5ID08KPfvL/hyjY0MpIsho8O0UBIwCIQCH/CLaVa201IsVzjvpElCp
P29HZ9oTMVDQErfajiVM5zAKBggqhkjOPQQDAwNoADBlAjEAglcA2XP2+KZKfFAD
StsEJ/E7lgEwewCNkwbTo5oN60leGDYaDTZxFfCeWvyJWMV8AjA52qSA/kjrtRvL
u7EFizBnmlNSX4Nv3+3AN4JJvoOgNY+QuX6Z02O4pJWJQlYIfww=
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-22T12:06:00+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1664
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →