DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

openfiber.nl · 171.22.67.21:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=*.openfiber.nl
Issuer
C=NL O=Trust Provider B.V. OU=Domain Validated SSL CN=Trust Provider B.V. TLS RSA CA G1
Valid from
2026-08-28T00:00:00+00:00
Expires
2027-03-14T23:59:59+00:00
Days remaining
172
Serial (hex)
0CEECF982C1FA2FFF0861D2C50256674
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:*.openfiber.nl, DNS:openfiber.nl

SHA-256 fingerprint

07:E5:EE:50:E9:71:5A:2F:70:A7:47:A7:7C:31:BF:3B:E2:AE:2D:6A:41:76:6E:C7:40:0B:5B:71:62:EF:E6:E1
Certificate extensions & PEM
authorityKeyIdentifier
F5:56:22:1F:D9:BF:6B:59:24:52:B0:E1:6A:CD:C0:E1:57:67:E9:E8
subjectKeyIdentifier
3C:DC:FC:96:A4:98:25:3E:14:87:BF:B2:3C:B8:30:7F:DA:73:B4:E1
subjectAltName
DNS:*.openfiber.nl, DNS:openfiber.nl
certificatePolicies
Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl
authorityInfoAccess
OCSP - URI:http://statusd.digitalcertvalidation.com CA Issuers - URI:http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 28 06:18:03.650 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D8:24:ED:80:53:E4:91:CC:65:D6:35: A0:75:0C:99:D7:28:45:6F:DD:E3:30:63:4C:94:F5:36: F1:47:78:1F:E1:02:21:00:AE:2C:DB:73:89:52:D2:6E: 7E:BD:7B:6A:6A:4D:B7:C3:51:71:E9:62:7B:11:00:1B: 1F:F3:86:76:65:CC:7F:78 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 28 06:18:03.682 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:EE:C7:8C:3D:DA:C0:78:FD:D6:27:30: 94:29:4B:B5:23:EB:E0:67:2C:18:77:F2:D1:32:A8:E9: DD:D5:C2:09:C2:02:21:00:A6:C2:32:A6:48:6C:8C:26: CC:E6:3D:88:E2:65:28:44:FB:F8:5A:8B:FB:BB:C7:E3: 32:54:9D:48:6B:B5:32:20 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Aug 28 06:18:03.783 2026 GMT Extensions: 00:00:05:00:0B:60:B5:CC Signature : ecdsa-with-SHA256 30:44:02:20:33:D0:28:BA:F0:E7:27:5A:63:D5:8A:F6: 8F:3F:AB:9B:7A:38:BA:E2:AC:FF:B7:73:09:50:4C:09: CB:FB:23:16:02:20:1A:55:5D:29:CA:F0:8E:5A:92:F0: AB:4D:A0:E7:AF:64:4B:4B:53:81:1D:5F:1D:24:18:69: 2B:27:C0:7A:44:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-23T11:36:09+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=NL O=Trust Provider B.V. OU=Domain Validated SSL CN=Trust Provider B.V. TLS RSA CA G1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2017-11-02T12:25:10+00:00
Expires
2027-11-02T12:25:10+00:00
Days remaining
405
Serial (hex)
0EC411EDF002F73036C4E5D42F3E34F2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

00:98:71:C3:A4:C6:07:31:1E:5A:E9:2F:01:09:5F:9B:F7:61:00:B8:79:4A:B0:A9:A5:21:0E:67:94:C8:60:7C
Certificate extensions & PEM
subjectKeyIdentifier
F5:56:22:1F:D9:BF:6B:59:24:52:B0:E1:6A:CD:C0:E1:57:67:E9:E8
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.1.2 CPS: https://www.digicert.com/CPS Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIQDsQR7fAC9zA2xOXULz408jANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0xNzExMDIxMjI1MTBaFw0yNzExMDIxMjI1MTBaMHYxCzAJBgNVBAYTAk5M
MRwwGgYDVQQKExNUcnVzdCBQcm92aWRlciBCLlYuMR0wGwYDVQQLExREb21haW4g
VmFsaWRhdGVkIFNTTDEqMCgGA1UEAxMhVHJ1c3QgUHJvdmlkZXIgQi5WLiBUTFMg
UlNBIENBIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CujVHP9
uKBwWwNGWNUnrpcfTvudmYEXX3zI6r+voOQPvupdT8iwyYdDWVtqOaGPeUF2kxiN
zeK1bxTHvbWr1VkhHGAF20H4z8G/SGFU9j7OaILnPCaUasoYphro6JUMnt2DqVJh
QMeZDy1h+3fX5Qs5oxuVuwgcWciM21sKlpA335QzIh6Ir5EpJsulAha/0MTZyopC
vQgBMGkNQelNlFp/58H0jt4RfRZ6Ad37PdNsZvnhyfflrhpJiZqnkJpVilguFda2
HvR9fghsVtEi/7aeTypJb5EwS4ZlVbCI1yiT5ES3nMFcOZm3NZkF+1rWOxpK1weJ
7+9inSl6+QcchQIDAQABo4IBTzCCAUswHQYDVR0OBBYEFPVWIh/Zv2tZJFKw4WrN
wOFXZ+noMB8GA1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB
/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/
BAgwBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290RzIuY3JsMEwGA1UdIARFMEMw
NwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwCAYGZ4EMAQIBMA0GCSqGSIb3DQEBCwUAA4IBAQCk3Aib9H7nhVT6
wikbW6IKwSrj149fmNgw9HpF2oH7DjY5XL8Lt2gtImTan91fxVkmLM6pYzpGuAE/
4MWUFArR9fqGzNTo1D/gl5k5wCbLFsw7vTDDM3qwiAvBSb+0hlIyW5rDRp2vRjl5
kpuD9rD9exHOkhErpP4ztWgeRaCrY4oYG5urj6NuQlMtHn6eV8gR4d29mmKrjCLV
/XMCIMtu5INrVzOoo0P1sB/Wwteg3HgQXTtI2177ANO+180PGAeG7gpIwjt/mhl1
8iyF7aYLP9rUBg+UEJ0s55VrTPKUDYyuAKXyODwgmtuYiZMDrQPcwGfRO1GDghIT
3dI21ici
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4132
Serial (hex)
033AF1E6A711A9A0BB2864B11D09FAE5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →