DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

rws.nl · 20.31.127.131:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL ST=Zuid-Holland L=Den Haag O=Rijkswaterstaat CN=rijkswaterstaat.nl
Issuer
C=IE O=DigiCert Ireland Limited CN=DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
Valid from
2026-03-25T00:00:00+00:00
Expires
2026-10-09T23:59:59+00:00
Days remaining
12
Serial (hex)
03DA8CD558CCBDFF6BEAA2CC0E783DE0
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:rijkswaterstaat.nl, DNS:www.rijkswaterstaat.nl, DNS:rws.nl, DNS:www.rws.nl

SHA-256 fingerprint

34:FD:EB:74:2F:41:95:B7:4E:6F:72:EE:73:B9:48:06:3C:0C:27:BD:FE:F7:73:F3:69:30:9F:2A:36:39:11:B7
Certificate extensions & PEM
authorityKeyIdentifier
18:89:E7:AF:F0:28:F6:7C:CA:68:05:52:E1:62:D8:91:D6:16:65:60
subjectKeyIdentifier
CC:AF:79:FC:88:A5:0A:BF:41:30:03:D1:3C:C8:99:B5:66:3D:63:B3
subjectAltName
DNS:rijkswaterstaat.nl, DNS:www.rijkswaterstaat.nl, DNS:rws.nl, DNS:www.rws.nl
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.eu CA Issuers - URI:http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Mar 25 15:49:03.620 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:58:91:12:7D:1F:94:11:14:2C:B1:F6:1A: 16:3F:45:87:47:45:15:52:A7:5D:9F:99:71:D1:3D:FB: F4:B7:E3:61:02:21:00:A3:EB:DD:7C:AC:4F:EC:49:03: 1F:F2:8C:A3:20:8D:FD:68:F7:AE:E7:2B:D0:A8:40:B2: 65:F2:FF:AD:0C:12:61 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Mar 25 15:49:03.559 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:03:CA:56:25:A0:09:B1:83:A2:69:65:01: C2:20:A2:37:6F:0C:2B:69:F1:7A:B4:50:5D:4E:EB:2F: C8:6D:40:FE:02:20:21:51:91:75:AE:5A:F6:95:89:27: 0B:23:2D:B9:AC:60:81:F0:C5:3F:20:B9:4B:A1:D6:9C: 0C:F2:07:43:D4:43 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Mar 25 15:49:03.518 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CD:37:BD:93:14:DD:A9:77:7C:A5:7A: DD:34:C0:18:75:D4:3A:2C:C9:0A:E5:94:69:89:4D:AD: 62:32:A8:F9:7E:02:20:0B:1C:B1:9A:2D:68:15:99:1D: 7B:A3:10:80:CD:A2:7F:73:CA:EF:37:0B:B8:D0:74:86: B1:5C:27:0B:19:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-09-27T23:01:13+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=IE O=DigiCert Ireland Limited CN=DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2022-09-19T00:00:00+00:00
Expires
2032-09-18T23:59:59+00:00
Days remaining
2183
Serial (hex)
064F84FF791FA676F29CF36537A2749E
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A4:AD:FC:29:17:BB:14:51:D3:12:37:1D:44:1A:CD:B6:86:10:7F:BC:0B:31:56:D5:57:0E:99:E1:12:19:74:FA
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
18:89:E7:AF:F0:28:F6:7C:CA:68:05:52:E1:62:D8:91:D6:16:65:60
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →