DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

nuernberg.de · 80.90.20.104:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Bayern L=Nuernberg O=Stadt Nuernberg CN=*.nuernberg.de
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2026-03-02T16:21:05+00:00
Expires
2027-04-03T16:21:04+00:00
Days remaining
162
Serial (hex)
713F18ABE3D8B56B41F69FE3
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.nuernberg.de, DNS:nuernberg.de

SHA-256 fingerprint

9E:01:8C:C7:3E:6F:88:BF:09:C8:61:64:91:26:05:BA:9A:80:F8:99:DD:48:BE:68:4E:C9:5E:78:2B:E8:44:CD
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsrsaovsslca2018.crl
subjectAltName
DNS:*.nuernberg.de, DNS:nuernberg.de
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
5C:08:24:BD:F2:3F:2E:1C:5A:F3:69:C0:09:5B:48:34:1D:9C:89:7C
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Mar 2 16:21:10.443 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:C4:D5:1E:F3:4F:55:6B:38:82:CA:CD: B6:6B:E7:F3:6E:CA:7B:5C:5D:EA:80:5A:97:88:01:C1: 59:F1:B9:E6:02:21:00:8D:A9:47:DA:1F:3B:A6:48:06: A4:E1:19:6D:14:8A:18:A2:3D:2A:47:8E:DB:42:FD:4D: A2:89:45:C4:38:D4:C9 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Mar 2 16:21:09.712 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:32:5D:5B:9D:1C:96:2C:94:BF:54:9A:49: 64:4F:82:71:D3:C6:56:23:38:2E:92:67:A7:3E:7A:A9: 20:89:1C:01:02:20:22:F2:C7:7F:5A:FE:01:6B:6E:93: 32:2F:AC:29:4B:C8:AB:6E:16:1F:A4:E4:B3:ED:21:51: 82:33:8F:31:4F:18 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Mar 2 16:21:10.671 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BE:09:2C:9C:77:85:F3:1F:94:D0:42: 95:1B:A2:6C:95:9D:59:55:A6:0E:22:4C:6A:31:18:7C: F9:CB:66:D8:4B:02:21:00:CF:8A:DE:74:65:DF:13:D8: C8:FE:36:D4:49:45:C8:71:E9:19:84:34:34:DE:67:6B: E1:72:88:37:AD:3E:FE:AD
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-23T04:39:22+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
759
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2009-03-18T10:00:00+00:00
Expires
2029-03-18T10:00:00+00:00
Days remaining
877
Serial (hex)
04000000000121585308A2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3B
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →