DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

orange.ma · 41.205.208.9:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=FR L=Issy-Les-Moulineaux O=Orange SA CN=espace-client.orange.ma
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2026-08-26T00:00:00+00:00
Expires
2027-03-12T23:59:59+00:00
Days remaining
131
Serial (hex)
016D59AF27E1E605FBA90E44B64970E0
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:espace-client.orange.ma, DNS:espace-entreprise.orange.ma, DNS:bienvivreledigital.orange.ma, DNS:magazine.orange.ma, DNS:starton.orange.ma, DNS:tajir.orange.ma, DNS:corporate.orange.ma, DNS:entreprise.orange.ma, DNS:apps.orange.ma, DNS:mapps.meditel.ma, DNS:secure.orange.ma, DNS:www.orange.ma, DNS:orange.ma, DNS:config.orange.ma, DNS:configuration-mobile.orange.ma, DNS:App.orange.ma, DNS:erecharge.orange.ma, DNS:recharge.orange.ma, DNS:paiement.orange.ma, DNS:cineday.orange.ma, DNS:cr7.orange.ma, DNS:mapsurvey.meditel.ma, DNS:mapsurvey.orange.ma, DNS:pro.orange.ma

SHA-256 fingerprint

2C:96:BC:9A:08:ED:6E:6D:FE:A6:A7:E7:F0:50:12:34:D6:BF:94:D6:38:EF:B9:BC:FF:73:EF:6C:71:F9:47:82
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
1B:C9:79:D3:58:FF:55:D9:A7:52:77:1B:72:72:48:67:77:00:7F:99
subjectAltName
DNS:espace-client.orange.ma, DNS:espace-entreprise.orange.ma, DNS:bienvivreledigital.orange.ma, DNS:magazine.orange.ma, DNS:starton.orange.ma, DNS:tajir.orange.ma, DNS:corporate.orange.ma, DNS:entreprise.orange.ma, DNS:apps.orange.ma, DNS:mapps.meditel.ma, DNS:secure.orange.ma, DNS:www.orange.ma, DNS:orange.ma, DNS:config.orange.ma, DNS:configuration-mobile.orange.ma, DNS:App.orange.ma, DNS:erecharge.orange.ma, DNS:recharge.orange.ma, DNS:paiement.orange.ma, DNS:cineday.orange.ma, DNS:cr7.orange.ma, DNS:mapsurvey.meditel.ma, DNS:mapsurvey.orange.ma, DNS:pro.orange.ma
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 26 07:26:09.246 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:79:61:92:A8:E9:31:F1:E4:98:9A:76:5E: 82:CF:56:9A:01:11:05:B6:07:D3:1B:E6:FE:B9:F8:75: 65:81:31:7D:02:21:00:86:9F:1C:B7:12:A9:CB:37:8F: CF:F4:C2:70:DC:03:DB:BF:AF:48:79:73:32:2B:2D:54: A8:7C:27:B1:93:A2:BC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 26 07:26:09.209 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:EF:D1:5E:34:16:CE:9B:32:88:9B:A4: 85:50:28:0F:C1:19:8F:9F:01:44:1D:F7:A9:E8:45:5B: E8:5F:A1:69:23:02:21:00:FF:A2:B8:1B:D9:7C:8B:EE: 5A:8B:B3:89:5D:AB:AE:9C:7C:C4:B6:30:61:DB:5A:84: 8C:AC:DB:08:B8:E0:EC:50 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 26 07:26:09.282 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:51:6D:A9:90:95:17:B9:65:B5:2B:AF:23: 5D:94:F2:55:56:55:E7:7C:BD:0D:75:23:AE:60:72:26: EC:A3:58:E5:02:21:00:A3:98:55:7D:EE:FA:EF:DC:61: 70:FA:3A:BA:A0:E0:67:E9:C1:D8:95:6C:EE:AA:5C:71: 92:92:03:A0:26:7D:4F
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES128-GCM-SHA256 · Checked 2026-11-01T23:06:11+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2021-03-30T00:00:00+00:00
Expires
2031-03-29T23:59:59+00:00
Days remaining
1609
Serial (hex)
0CF5BD062B5602F47AB8502C23CCF066
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIQDPW9BitWAvR6uFAsI8zwZjANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMTAzMzAwMDAwMDBaFw0zMTAzMjkyMzU5NTlaMFkxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh
bCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV
cNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy
FuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc
3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8
osicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT
zGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAYIwggF+MBIGA1Ud
EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHSFgMBmx9833s+9KTeqAx2+7c0XMB8G
A1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG
NGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH
Mi5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwC
ATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG
9w0BAQsFAAOCAQEAkPFwyyiXaZd8dP3A+iZ7U6utzWX9upwGnIrXWkOH7U1MVl+t
wcW1BSAuWdH/SvWgKtiwla3JLko716f2b4gp/DA/JIS7w7d7kwcsr4drdjPtAFVS
slme5LnQ89/nD/7d+MS5EHKBCQRfz5eeLjJ1js+aWNJXMX43AYGyZm0pGrFmCW3R
bpD0ufovARTFXFZkAdl9h6g4U5+LXUZtXMYnhIHUfoyMo5tS58aI7Dd8KvvwVVo4
chDYABPPTHPbqjc1qCmBaZx2vN4Ye5DUys/vZwP9BFohFrH/6j/f3IL16/RZkiMN
JCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA==
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →