DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nts.ch · 217.11.217.67:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.nts.ch
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS ECC CA G1
Valid from
2026-02-18T00:00:00+00:00
Expires
2027-02-17T23:59:59+00:00
Days remaining
144
Serial (hex)
0FF723D287395E403639ECC1E289A7F7
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:*.nts.ch, DNS:nts.ch

SHA-256 fingerprint

D3:38:E0:E4:8B:5D:A0:73:1C:C1:37:F1:9F:FC:B5:F4:3B:5D:A6:49:4D:CB:03:B3:48:47:A9:16:73:1D:92:BF
Certificate extensions & PEM
authorityKeyIdentifier
41:DF:4D:F0:61:93:C7:FC:B5:AB:CD:7C:92:02:9D:0F:7C:9C:0A:90
subjectKeyIdentifier
0D:05:0D:FB:D9:35:23:6C:09:EF:5F:D1:5A:DC:A4:D0:87:7F:D5:48
subjectAltName
DNS:*.nts.ch, DNS:nts.ch
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://cdp.rapidssl.com/RapidSSLTLSECCCAG1.crl
authorityInfoAccess
OCSP - URI:http://status.rapidssl.com CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSECCCAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Feb 18 09:23:26.152 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:55:D8:C1:9D:4A:A0:0A:1D:81:3A:FC:61: 6B:6B:67:BB:54:36:8D:B6:B1:A5:11:DD:69:AC:CB:25: 13:85:A6:2F:02:21:00:94:9F:9D:C8:3C:EE:3D:CF:04: 4B:63:73:E9:CB:A5:98:85:2F:CE:65:3C:B1:79:85:3E: FA:1E:F0:E4:36:CB:D5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Feb 18 09:23:26.158 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0F:2E:68:79:15:E9:16:C6:8A:80:8A:64: D3:22:99:02:0D:0C:AF:AC:F3:CC:55:98:8F:F3:E9:47: F7:CB:FC:29:02:20:56:DD:88:1B:6D:0E:E6:99:14:F8: 9F:E8:6D:C3:31:28:BB:1A:D0:2E:D3:A6:F6:13:4D:A6: E4:70:DB:9E:D8:43 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Feb 18 09:23:26.391 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B0:23:15:CF:F0:55:3E:03:89:EE:0D: 45:2B:B3:C5:77:62:1F:D5:10:E8:37:5E:CE:69:84:AC: DF:00:DC:DD:BF:02:21:00:F4:A1:22:F0:4F:A0:44:85: B4:67:6B:3B:95:E1:AB:EB:FE:09:74:26:BF:F7:61:A4: 08:F8:61:F6:25:EE:C9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-26T16:39:25+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=RapidSSL TLS ECC CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2017-11-02T12:59:58+00:00
Expires
2027-11-02T12:59:58+00:00
Days remaining
401
Serial (hex)
0DED78965349B368D41F7EE3E1EED1EB
Signature
ecdsa-with-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

FC:16:D5:32:03:BD:91:87:D6:9C:C9:9D:2D:A5:51:07:6B:4D:CB:29:81:40:D6:75:1F:7A:01:29:66:C9:9F:DD
Certificate extensions & PEM
subjectKeyIdentifier
41:DF:4D:F0:61:93:C7:FC:B5:AB:CD:7C:92:02:9D:0F:7C:9C:0A:90
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.1.1 CPS: https://www.digicert.com/CPS Policy: 2.16.840.1.114412.1.2 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4128
Serial (hex)
055556BCF25EA43535C3A40FD5AB4572
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →