DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

orange.es · 45.60.33.143:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=ES ST=Madrid L=Pozuelo De Alarcon O=MasOrange S.L. CN=www.orange.es
Issuer
C=IE O=DigiCert Ireland Limited CN=DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
Valid from
2026-08-20T00:00:00+00:00
Expires
2027-03-06T23:59:59+00:00
Days remaining
164
Serial (hex)
03D79CFF2DB8D9CDF2A789532F7225EE
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.orange.es, DNS:en.orange.es, DNS:orange.es, DNS:posiciona.orange.es

SHA-256 fingerprint

85:DE:41:A8:D8:01:63:62:0F:25:39:54:44:9A:35:CA:7B:B0:51:F5:7F:06:DC:77:FC:5A:02:0D:C1:F1:3C:D0
Certificate extensions & PEM
authorityKeyIdentifier
18:89:E7:AF:F0:28:F6:7C:CA:68:05:52:E1:62:D8:91:D6:16:65:60
subjectKeyIdentifier
53:37:D6:E9:F4:A0:E8:7D:53:55:3D:2E:26:E4:48:F9:3B:E2:F6:37
subjectAltName
DNS:www.orange.es, DNS:en.orange.es, DNS:orange.es, DNS:posiciona.orange.es
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.eu CA Issuers - URI:http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 20 10:25:39.452 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:6C:1F:2D:AE:3C:97:BE:7A:77:74:E1:90: 2C:7B:51:3F:B5:29:0B:BD:2D:AD:56:A1:58:47:FE:BA: B8:95:73:11:02:21:00:BD:43:5C:61:E3:4E:44:F1:20: 2F:CE:52:4E:07:C3:0F:90:D7:E3:A8:16:90:02:D8:93: E9:5C:9A:53:2A:CD:04 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 20 10:25:39.419 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DD:EC:8B:14:97:87:11:62:96:FF:84: 0B:2D:DD:09:2D:61:03:BE:C7:62:EC:BC:9E:ED:32:29: 6A:69:96:08:7B:02:20:6D:17:AC:99:B0:D5:86:E0:94: 0B:12:7F:C9:6F:27:F5:72:DD:1C:C8:40:F5:98:B2:B2: AC:50:F6:03:69:8C:33 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 20 10:25:39.342 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:20:86:38:36:84:AB:E8:AD:01:03:CB:08: BE:92:EB:35:D4:1F:E2:3A:2C:52:B7:8F:CC:DB:3D:67: 6B:03:75:F6:02:20:61:7C:F3:24:3A:9E:41:B8:06:D4: A7:1C:65:DB:0C:64:E6:17:CB:89:88:94:76:82:96:25: 0A:E9:54:11:F4:C2
-----BEGIN CERTIFICATE-----
MIIHtDCCBZygAwIBAgIQA9ec/y242c3yp4lTL3Il7jANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJJRTEhMB8GA1UEChMYRGlnaUNlcnQgSXJlbGFuZCBMaW1pdGVk
MTMwMQYDVQQDEypEaWdpQ2VydCBHMiBUTFMgRVUgUlNBNDA5NiBTSEEzODQgMjAy
MiBDQTEwHhcNMjYwODIwMDAwMDAwWhcNMjcwMzA2MjM1OTU5WjBsMQswCQYDVQQG
EwJFUzEPMA0GA1UECBMGTWFkcmlkMRswGQYDVQQHExJQb3p1ZWxvIERlIEFsYXJj
b24xFzAVBgNVBAoTDk1hc09yYW5nZSBTLkwuMRYwFAYDVQQDEw13d3cub3Jhbmdl
LmVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5nxzYCbi6I7NCDq
JhsEhEQIgDUMEMB/uixs8Tzy6Ecmkg6hu7f/zQGxTudKxcr76vZgDbnIyL6K76Xk
EQnReA0Pz6UXS14+AukevxzMma5oezdvJ+oocneoNIKfaeZIkB3rCa6M9QtUcRF0
a2Vj8OqXUhPwMvpGKUVP8W3P54T7pHH14N/sWiq1UcJVAslaMHipo+gf/1N6BHWG
1JyaxaVD+vor8uVGQv5z2LD1hxwXCVhP/hPjMY1Ittoz+BZhWvgTQcTIPCP3xZku
suhDRahE85qAsNEaW7pxP0Z1361dW1QhAw/DqW3MF4ed58YcUVgZgtH/GWBoN3P8
2V6ZuQIDAQABo4IDVzCCA1MwHwYDVR0jBBgwFoAUGInnr/Ao9nzKaAVS4WLYkdYW
ZWAwHQYDVR0OBBYEFFM31un0oOh9U1U9LibkSPk74vY3MEYGA1UdEQQ/MD2CDXd3
dy5vcmFuZ2UuZXOCDGVuLm9yYW5nZS5lc4IJb3JhbmdlLmVzghNwb3NpY2lvbmEu
b3JhbmdlLmVzMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0
dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0l
BAwwCgYIKwYBBQUHAwEwTwYDVR0fBEgwRjBEoEKgQIY+aHR0cDovL2NybC5kaWdp
Y2VydC5ldS9EaWdpQ2VydEcyVExTRVVSU0E0MDk2U0hBMzg0MjAyMkNBMS5jcmww
gYMGCCsGAQUFBwEBBHcwdTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZGlnaWNl
cnQuZXUwTgYIKwYBBQUHMAKGQmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmV1L0Rp
Z2lDZXJ0RzJUTFNFVVJTQTQwOTZTSEEzODQyMDIyQ0ExLmNydDAMBgNVHRMBAf8E
AjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgBMY9yY5Zwdq4j2Hoo93q6P
q0SjN3tfm5TD+6Gc/MG+JgAAAaAetHp8AAAEAwBHMEUCIGwfLa48l756d3ThkCx7
UT+1KQu9La1WoVhH/rq4lXMRAiEAvUNcYeNORPEgL85STgfDD5DX46gWkALYk+lc
mlMqzQQAdgDW1Y2p0BdT82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAAAaAetHpb
AAAEAwBHMEUCIQDd7IsUl4cRYpb/hAst3QktYQO+x2LsvJ7tMilqaZYIewIgbRes
mbDVhuCUCxJ/yW8n9XLdHMhA9ZiysqxQ9gNpjDMAdQBEwr0M6RQOZKXJSgGTClqh
uzWXDgDuERaJaCocRNe1ZgAAAaAetHoOAAAEAwBGMEQCICCGODaEq+itAQPLCL6S
6zXUH+I6LFK3j8zbPWdrA3X2AiBhfPMkOp5BuAbUpxxl2wxk5hfLiYiUdoKWJQrp
VBH0wjANBgkqhkiG9w0BAQsFAAOCAgEA0VzEalLStiDxSBHcqbYAcCl/DVYc8N02
gZ0IW7821uQ8QCB21LLtULggZUMFsYDnK/MCb5Bh+w01RptH/HmhBUrgIu8KiaBz
BLEv77whY9tjcgIn9EnJh0T4+ZbbWp4HYSz6UFfauG3ib+CICkLX+OmzcJjTdpSu
gRKCxBAOv8O7/4KTpUtRuUCaZJ7tQBOuiG2kYG4XZpI30UcYhow/GgJ0b6Ojqabk
wrQl1K3GJc+IXfbAIOphGx+jO/ntXuNOz4Suke1GRNN7NRQ2ExV5Z5RMyF0JwgRK
k+XFjHVvLeit36Z3HPCPO8iFpFCUwQAsSodVyHnmr0m3tNzDu0u+JTLTLdGkNyLp
UMcg/1a8+e7z6MseaiIhkXX1CM5HiHVOsin0JXAzjqgcjbGa6o1dVn3A+X+s7VJe
v3cl2dT9jOCZA7vCvKWt2bNAgm2mwOp6ruXfwdrTdV0/yrUrzynPfklJkWpdTTha
BivefpQ0o/at+z3OoqL4FNLpX/tpXVIWW84k0NeNfCS+3xqYAaysWNMJVWos7m66
3bMBD3BaehELaDZL2mrElz9zPUYW+PbNmEmj9QMbCdY0C6jtewGhazdYmmo2mGaS
5ls93hnjlY4K788gsKBC42u1Q7IcRNRINpn8d5FXcef8K2DP/WYmULutpqJmXhRm
kle/gG5bKh0=
-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-23T08:26:51+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=IE O=DigiCert Ireland Limited CN=DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-09-19T00:00:00+00:00
Expires
2032-09-18T23:59:59+00:00
Days remaining
2187
Serial (hex)
064F84FF791FA676F29CF36537A2749E
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A4:AD:FC:29:17:BB:14:51:D3:12:37:1D:44:1A:CD:B6:86:10:7F:BC:0B:31:56:D5:57:0E:99:E1:12:19:74:FA
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
18:89:E7:AF:F0:28:F6:7C:CA:68:05:52:E1:62:D8:91:D6:16:65:60
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2013-08-01T12:00:00+00:00
Expires
2038-01-15T12:00:00+00:00
Days remaining
4132
Serial (hex)
033AF1E6A711A9A0BB2864B11D09FAE5
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →