DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

pierre-fabre.com · 23.222.53.220:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=FR L=Paris O=PIERRE FABRE SA CN=pierre-fabre.com
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid from
2026-07-24T00:00:00+00:00
Expires
2027-02-07T23:59:59+00:00
Days remaining
119
Serial (hex)
029B34345A3C785999B9EFA3380951A0
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:pierre-fabre.com, DNS:static.eau-thermale-avene.com, DNS:static.klorane.com, DNS:static.pierre-fabre.com, DNS:static.pierre-fabre.io, DNS:static.pierre-fabre.live, DNS:static.renefurterer.com, DNS:www.avene-me.com, DNS:www.eau-thermale-avene.ba, DNS:www.eau-thermale-avene.co.nz, DNS:www.eau-thermale-avene.co.za, DNS:www.eau-thermale-avene.dz, DNS:www.eau-thermale-avene.lt, DNS:www.eau-thermale-avene.se, DNS:www.eau-thermale-avene.sn, DNS:www.eau-thermale-avene.tn, DNS:www.eau-thermale-avene.vn, DNS:www.pierre-fabre.com

SHA-256 fingerprint

70:1B:E8:20:EE:50:CB:15:77:CA:80:9E:09:E5:82:A9:D7:FF:AF:31:F5:38:C5:93:FD:4D:4A:6A:44:6D:42:6D
Certificate extensions & PEM
authorityKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
subjectKeyIdentifier
10:44:AD:07:05:03:16:2B:AF:C5:47:B3:B1:5C:6A:57:98:1D:5A:E7
subjectAltName
DNS:pierre-fabre.com, DNS:static.eau-thermale-avene.com, DNS:static.klorane.com, DNS:static.pierre-fabre.com, DNS:static.pierre-fabre.io, DNS:static.pierre-fabre.live, DNS:static.renefurterer.com, DNS:www.avene-me.com, DNS:www.eau-thermale-avene.ba, DNS:www.eau-thermale-avene.co.nz, DNS:www.eau-thermale-avene.co.za, DNS:www.eau-thermale-avene.dz, DNS:www.eau-thermale-avene.lt, DNS:www.eau-thermale-avene.se, DNS:www.eau-thermale-avene.sn, DNS:www.eau-thermale-avene.tn, DNS:www.eau-thermale-avene.vn, DNS:www.pierre-fabre.com
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jul 24 14:41:19.409 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:97:5C:3E:DA:6B:C0:0F:74:A5:45:A3: 09:A9:5D:16:A6:58:2F:9B:16:FE:5F:54:2C:AF:E5:8E: F6:85:B0:72:73:02:20:57:D0:81:E8:68:F5:49:BC:9D: E5:B6:EA:E0:9E:52:6F:E7:CA:6D:50:B2:7B:27:A1:77: FC:CC:3D:14:9F:F7:79 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Jul 24 14:41:19.413 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:83:3C:A3:23:4A:A8:3B:EE:28:B5:7A: 59:16:23:A8:AE:72:F4:F4:E1:2B:1B:65:EB:05:46:60: 0A:5F:CB:B8:2F:02:21:00:A2:D3:37:34:7B:1D:EC:D3: FA:64:54:24:B5:64:DD:AF:F5:44:69:E3:2B:CB:09:CB: 6F:9F:5B:6A:D1:E5:EA:B3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 24 14:41:19.476 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:51:82:ED:D3:E4:EF:F4:47:4C:6D:47:2C: 58:9A:B3:F2:23:58:6D:FD:87:32:0A:00:FD:17:E0:E4: 9C:AD:1D:21:02:21:00:97:9C:9C:03:D8:C1:A3:C8:0B: 27:8D:7D:E5:C7:62:6E:CF:5B:B5:74:ED:1C:FE:DE:F1: 13:AE:A6:BA:CE:E2:0B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-11T17:12:19+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
Valid from
2021-04-14T00:00:00+00:00
Expires
2031-04-13T23:59:59+00:00
Days remaining
1645
Serial (hex)
0B00E92D4D6D731FCA3059C7CB1E1886
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
authorityKeyIdentifier
B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →