THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

ns1.widder.at · 195.234.102.228:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed

Certificate verification failed

Subject
CN=*.widder.at
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
Valid from
2026-06-15T00:00:00+00:00
Expires
2026-12-30T23:59:59+00:00
Days remaining
87
Serial (hex)
92C3F9E764EB2FD032EC589A910F4903
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.widder.at, DNS:widder.at

SHA-256 fingerprint

D6:DB:92:0B:2D:1D:05:2E:42:60:8D:FB:FD:0F:50:E4:BB:B1:07:94:8C:7B:7F:89:02:36:CF:F7:08:50:7F:52
Certificate extensions & PEM
authorityKeyIdentifier
68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
subjectKeyIdentifier
96:E1:6F:B3:20:BA:B1:F0:BD:FC:C3:CA:31:D8:20:5F:7C:CF:E4:F1
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:*.widder.at, DNS:widder.at
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 15 09:34:16.418 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D6:A5:19:3D:6A:74:A0:BB:A6:24:C7: 14:1C:71:2D:51:D4:E4:96:9C:1C:91:F9:07:9F:A3:E8: 28:6B:01:D9:52:02:20:5C:EB:07:21:A5:C1:55:22:18: B7:C0:F2:C2:1D:36:A8:35:2D:3C:7C:9F:A2:60:60:4B: 3C:B6:31:65:74:84:D4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Jun 15 09:34:16.337 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D9:53:38:CF:4B:32:2A:15:CD:33:6F: 92:C7:74:EA:DE:7B:74:58:59:74:98:8B:B6:35:13:4E: 56:C7:E1:8B:A4:02:21:00:80:D4:53:47:FE:73:C2:40: 47:28:B7:4B:6D:C2:72:7E:98:A7:F8:7F:FC:27:65:09: CA:DD:9E:E8:EA:B7:CD:27 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jun 15 09:34:17.140 2026 GMT Extensions: 00:00:05:00:03:DB:45:85 Signature : ecdsa-with-SHA256 30:46:02:21:00:DA:EA:BE:A9:F3:7F:F5:B2:28:86:5D: 24:C6:16:A0:A8:0F:4E:AB:D0:FA:9D:E9:93:A7:4B:57: 63:14:8F:B4:FF:02:21:00:89:1C:41:3B:D3:81:4E:56: F9:44:39:14:82:CD:DC:88:7B:EC:2B:D4:84:F8:84:9D: A7:00:11:DB:87:5D:4C:CF
-----BEGIN CERTIFICATE-----
MIIHezCCBeOgAwIBAgIRAJLD+edk6y/QMuxYmpEPSQMwDQYJKoZIhvcNAQELBQAw
YDELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIENBIERWIFIz
NjAeFw0yNjA2MTUwMDAwMDBaFw0yNjEyMzAyMzU5NTlaMBYxFDASBgNVBAMMCyou
d2lkZGVyLmF0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtdIBysUz
GzVoEuPa4MzdTPtV03Efv1ayIDjYBC1xrjrExWcvuYdstrJjPEmSiNjcbeZlaIaA
9a3aD0tp/kTug3ghfgYMqGaSjDa7djRxC03YbmqyTxMnw7NE01ohLT2DtydkMrA7
pWeW0lqE7BzabULGsYRim2jj2QZvm9fa1kBQ5DEh4/1U3sauDH/fF4dorwQnuVsN
bKwEW8cSU1UpFJHFMG4CddAgmX2+wmM6gJIeexwxOAICih6BAMAG1oK7MXO7SNLy
krCSc2uPCS9WBA71bV6GKYlNr5mZz4rhNm7YEdJgYcOXe9FZkgTU7yE9h59IsbMz
tveQzTaI1xxtcsyn03xgHkZgmla3CDg22M5wXugJsvAMCAbSqypCZeyK2wRmNMRS
sZg7Jsos9POqRE2ZuspF7MG/eAch2q5WtTBID8JKiaeN8xjb11vKOKXyWr8E7E61
HeEXPvBsmY5UMtEG7FoCUUgl56WgSaJvZBVpvi0jCuHyw5ut/oCmOa0ZV3I8uyQu
+gDFJQnY2xntrIzkH7KHzDJzI5cYLNTzs69KGcMDu2Yp2xucflqfR4pLeHcz2rjf
ijiratl2n/4iUdG4pysZ883JnsB+UH23PPXdKVWElWGiCpAukFKFqg+goeV3ys4A
y7zluS02erOwWJIfQdsmZQNCWaKzXP69bB8CAwEAAaOCAvgwggL0MB8GA1UdIwQY
MBaAFGjAEhYYDq/O9oemMlejRlFdywcnMB0GA1UdDgQWBBSW4W+zILqx8L38w8ox
2CBffM/k8TAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAK
BggrBgEFBQcDATBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUH
AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUH
AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp
Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvbkNBRFZSMzYuY3J0MCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAhBgNVHREEGjAYggsqLndpZGRl
ci5hdIIJd2lkZGVyLmF0MIIBiAYKKwYBBAHWeQIEAgSCAXgEggF0AXIAdgDXbX0Q
0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ7KobdiAAAEAwBHMEUCIQDW
pRk9anSgu6YkxxQccS1R1OSWnByR+Qefo+goawHZUgIgXOsHIaXBVSIYt8Dywh02
qDUtPHyfomBgSzy2MWV0hNQAdwDIo8R/x7OtuTVrAT9qehJt4zpOQ6XGRvmXrTl1
mR3PmgAAAZ7KobcRAAAEAwBIMEYCIQDZUzjPSzIqFc0zb5LHdOree3RYWXSYi7Y1
E05Wx+GLpAIhAIDUU0f+c8JARyi3S23Ccn6Yp/h//CdlCcrdnujqt80nAH8AjspH
C6zeavOiBrCkeoS3Rv4fxr+VPiXmm07kAkjzxugAAAGeyqG6NAAIAAAFAAPbRYUE
AwBIMEYCIQDa6r6p83/1siiGXSTGFqCoD06r0Pqd6ZOnS1djFI+0/wIhAIkcQTvT
gU5W+UQ5FILN3Ih77CvUhPiEnacAEduHXUzPMA0GCSqGSIb3DQEBCwUAA4IBgQBb
N6s9AUp4iiSeixlG8dtse9uPxE6w7vzbAUFt/QpF80fH0ZkyvdljqfDn39nHL76s
LJGggQAXd3UzCs1j3YGBQsEFV9jqHXQrt4zcnABHEn6Ttk3hdBLMDUmKNsRD8XD5
RK1MdW3xLF6cLTbFqT5VBkrAwswE/sPKsbihe4+OXyOxPKc4mqBhw8IZCQCBXlcu
gVNoch2pYFJwVQLcnZgoeG2JxJxXm7HyH8Jko5j2ryCcshiIdg85RqyFKoMeCg2V
AmsXtuCjVKi8r3+lj2uxu9v1lqQjhZQQRce0ejhFV6DiPnlRUeLPZbGqNW2ssBYn
NtTEWEssRm4vhKNjwPqYrBGY4I0rxhYGl/gUppwRaVPBvtR7wHN4hSuo0PQfXdL5
L2Sg+Ni5Nz3bmhxqmzapUciiosx8liCltcZieNwnEEE5ynHWVuIkxiNugQ1S+PoX
FCMoELjqP+sNLAwhwDEOtMc2trr3Q2R1OsB5kRUgvUqH5UkfTgpSu9vCN+KVlHU=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-04T13:45:17+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GB ST=Greater Manchester L=Salford O=Sectigo Limited CN=Sectigo RSA Domain Validation Secure Server CA
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2018-11-02T00:00:00+00:00
Expires
2030-12-31T23:59:59+00:00
Days remaining
1549
Serial (hex)
7D5B5126B476BA11DB74160BBC530DA7
Signature
RSA-SHA384
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIGEzCCA/ugAwIBAgIQfVtRJrR2uhHbdBYLvFMNpzANBgkqhkiG9w0BAQwFADCB
iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTgx
MTAyMDAwMDAwWhcNMzAxMjMxMjM1OTU5WjCBjzELMAkGA1UEBhMCR0IxGzAZBgNV
BAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UE
ChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFJTQSBEb21haW4g
VmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1nMz1tc8INAA0hdFuNY+B6I/x0HuMjDJsGz99J/LEpgPLT+N
TQEMgg8Xf2Iu6bhIefsWg06t1zIlk7cHv7lQP6lMw0Aq6Tn/2YHKHxYyQdqAJrkj
eocgHuP/IJo8lURvh3UGkEC0MpMWCRAIIz7S3YcPb11RFGoKacVPAXJpz9OTTG0E
oKMbgn6xmrntxZ7FN3ifmgg0+1YuWMQJDgZkW7w33PGfKGioVrCSo1yfu4iYCBsk
Haswha6vsC6eep3BwEIc4gLw6uBK0u+QDrTBQBbwb4VCSmT3pDCg/r8uoydajotY
uK3DGReEY+1vVv2Dy2A0xHS+5p3b4eTlygxfFQIDAQABo4IBbjCCAWowHwYDVR0j
BBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFI2MXsRUrYrhd+mb
+ZsF4bgBjWHhMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAbBgNVHSAEFDASMAYGBFUdIAAw
CAYGZ4EMAQIBMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRydXN0
LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDB2Bggr
BgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0LmNv
bS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZaHR0cDov
L29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAMr9hvQ5Iw0/H
ukdN+Jx4GQHcEx2Ab/zDcLRSmjEzmldS+zGea6TvVKqJjUAXaPgREHzSyrHxVYbH
7rM2kYb2OVG/Rr8PoLq0935JxCo2F57kaDl6r5ROVm+yezu/Coa9zcV3HAO4OLGi
H19+24rcRki2aArPsrW04jTkZ6k4Zgle0rj8nSg6F0AnwnJOKf0hPHzPE/uWLMUx
RP0T7dWbqWlod3zu4f+k+TY4CFM5ooQ0nBnzvg6s1SQ36yOoeNDT5++SR2RiOSLv
xvcRviKFxmZEJCaOEDKNyJOuB56DPi/Z+fVGjmO+wea03KbNIaiGCpXZLoUmGv38
sbZXQm2V0TP2ORQGgkE49Y9Y3IBbpNV9lXj9p5v//cWoaasm56ekBYdbqbe4oyAL
l6lFhd2zi+WJN44pDfwGF/Y4QA5C5BIG+3vzxhFoYt/jmPQT2BVPi7Fp2RBgvGQq
6jG35LWjOhSbJuMLe/0CjraZwTiXWTb2qHSihrZe68Zk6s+go/lunrotEbaGmAhY
LcmsJWTyXnW0OMGuf1pGg+pRyrbxmRE1a6Vqe8YAsOf4vmSyrcjC8azjUeqkk+B5
yOGBQMkKW+ESPMFgKuOXwIlCypTPRpgSabuY0MLTDXJLR27lk8QyKGOHQ+SwMj4K
00u/I5sUKUErmgQfky3xxzlIPK1aEn8=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=SE O=AddTrust AB OU=AddTrust External TTP Network CN=AddTrust External CA Root
Valid from
2000-05-30T10:48:38+00:00
Expires
2020-05-30T10:48:38+00:00
Days remaining
-2319
Serial (hex)
13EA28705BF4ECED0C36630980614336
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1A:51:74:98:0A:29:4A:52:8A:11:07:26:D5:85:56:50:26:6C:48:D9:88:3B:EA:69:2B:67:B6:D7:26:DA:98:C5
Certificate extensions & PEM
authorityKeyIdentifier
AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →