DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nomura.com · 85.119.28.22:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=GB businessCategory=Private Organization serialNumber=01550505 C=GB L=London O=Nomura International plc CN=www.nomura.com
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2026-05-08T00:00:00+00:00
Expires
2026-11-22T23:59:59+00:00
Days remaining
57
Serial (hex)
0E67F4878DF8EAD867D749907649189B
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.nomura.com, DNS:nomura.com

SHA-256 fingerprint

E2:43:D4:0E:88:DF:E4:89:06:F0:9B:69:B4:64:88:1D:44:5E:6F:61:39:5B:75:1A:E4:5C:DF:89:DD:65:E2:9B
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
44:B4:E1:4B:DF:E8:85:BE:6E:15:6B:A9:67:C6:93:47:D3:3D:2C:9E
subjectAltName
DNS:www.nomura.com, DNS:nomura.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : May 8 15:42:46.634 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:3B:5A:00:11:D3:39:C9:5E:1C:D1:91:6F: 90:B7:1B:77:A6:DE:26:FD:1A:B6:B1:10:E2:B1:3C:F6: 5F:61:2C:EE:02:21:00:92:08:BE:58:19:DB:FA:7F:D6: 22:35:73:9D:7F:1C:1F:35:F9:D9:81:8A:DC:F0:F0:86: 10:C4:9A:48:FA:CE:C2 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : May 8 15:42:46.784 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:AB:CB:C7:56:CD:F3:92:18:13:36:AA: 4E:52:89:B2:2F:30:08:78:1F:8D:4C:9A:66:1D:94:1C: 33:8A:B3:2C:02:20:41:AB:4C:A8:C0:79:7D:DC:3F:1B: 17:43:13:CA:33:62:4D:7A:BC:83:9F:52:86:0E:E7:74: 37:73:81:81:D5:1F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : May 8 15:42:46.647 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:32:2E:57:81:E0:A2:43:2C:8E:8A:6B:E5: 27:B6:4C:F5:81:77:14:36:94:75:BE:AC:03:FB:4A:CE: 16:1D:5E:5D:02:21:00:BC:22:BE:25:E8:BC:DB:3A:44: 05:B2:2C:AC:2C:A6:0F:AB:DB:27:81:C7:CB:C9:55:2D: B3:5D:59:C4:70:73:E4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-09-26T02:22:23+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1375
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →