DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

sbmbank.co.ke · 192.124.249.133:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=sbmbank.co.ke
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Valid from
2026-10-18T11:07:33+00:00
Expires
2026-12-08T09:04:22+00:00
Days remaining
31
Serial (hex)
66DC09847D410146
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:sbmbank.co.ke, DNS:www.sbmbank.co.ke

SHA-256 fingerprint

37:16:EF:37:DA:9E:0E:C2:BC:9F:B6:0C:1B:D1:8D:F6:D3:81:A5:A6:0B:6A:2C:54:C2:EF:B9:00:38:14:26:52
Certificate extensions & PEM
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
keyUsage
Digital Signature, Key Encipherment
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfr1v1dv_s1-1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.16.840.1.114414.1.7.23.1 CPS: http://certificates.starfieldtech.com/repository/
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_issuing_dv-r1v1.crt OCSP - URI:http://ocsp.starfieldtech.com/
authorityKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
subjectAltName
DNS:sbmbank.co.ke, DNS:www.sbmbank.co.ke
subjectKeyIdentifier
2E:1F:50:E9:87:75:6C:F1:FD:B5:E4:2B:81:C5:2B:2F:64:87:88:30
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 18 11:07:34.053 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C3:ED:36:71:44:47:CB:C5:2E:51:8B: 1F:DA:5D:94:1D:26:1F:FF:40:C0:2B:3C:8C:47:8E:AC: E5:C1:6E:41:47:02:21:00:89:0E:1C:05:87:15:9F:23: 49:2F:81:36:27:1E:BE:93:A3:E3:68:00:77:24:26:BB: 73:C9:DC:42:89:D8:30:95 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 18 11:07:34.223 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:84:C4:39:2C:44:EE:90:BB:54:F4:CB: 74:19:FB:D8:7C:33:2F:C5:05:53:93:67:FD:83:4D:0D: 5F:99:2A:34:83:02:20:1C:20:90:B9:5F:07:75:F9:75: 91:12:21:45:F9:18:FD:8E:DA:4C:24:00:F0:38:61:46: EF:5A:FA:25:B0:55:1E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Oct 18 11:07:34.379 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:1A:17:B4:CC:64:74:8B:E9:77:2F:D9:49: 26:B6:01:95:5F:B2:43:13:61:90:AB:60:0D:96:C1:8C: 1A:68:D3:23:02:21:00:F5:5C:D6:FF:AA:8C:63:EE:C5: 72:BC:D7:48:FE:75:B6:8F:CD:D4:20:35:74:6F:3F:86: 9B:28:E4:43:0B:24:22
-----BEGIN CERTIFICATE-----
MIIHYTCCBUmgAwIBAgIIZtwJhH1BAUYwDQYJKoZIhvcNAQELBQAwYDELMAkGA1UE
BhMCVVMxHzAdBgNVBAoTFlN0YXJmaWVsZCBUZWNobm9sb2dpZXMxMDAuBgNVBAMT
J1N0YXJmaWVsZCBUTFMgSW50ZXJtZWRpYXRlIENBIERWIC0gUjF2MTAeFw0yNjEw
MTgxMTA3MzNaFw0yNjEyMDgwOTA0MjJaMBgxFjAUBgNVBAMTDXNibWJhbmsuY28u
a2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClF7iN5rLUsiqEhlfw
eGITSjWv0p98T6ZMDDybNpyaFjy4srgRlGXK8Z6L7liovBqbPAVIsGYMp6NVkVNN
QjVsVICKdsLqEXrCUPZQQD0hneWRJAxeDHtJOwNDx1SyYbZXyhrjg4w+HOUmOCpX
qvcNbMo8N92WG+Hbbbjtgj0O/zBJZz1OLm4V9Y4X5FwI2DKf61l7K9FzeoB4mnyQ
yB76K6mnhYe0RIscJQq4SS+y9yrOj+/qAuYozwX4WlFcj9oQhWxGF8sRXkxAkLqF
1Sa7zxX9kUWOI2+vj9Hyu+TJiO0UAW5ummaMj4zHYAXbqzKb0ZJk9Gq9ebUDOiAd
4KwXAgMBAAGjggNlMIIDYTAMBgNVHRMBAf8EAjAAMBMGA1UdJQQMMAoGCCsGAQUF
BwMBMA4GA1UdDwEB/wQEAwIFoDA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3Js
LnN0YXJmaWVsZHRlY2guY29tL3NmcjF2MWR2X3MxLTEuY3JsMGMGA1UdIARcMFow
CAYGZ4EMAQIBME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0dHA6Ly9j
ZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8wgZUGCCsG
AQUFBwEBBIGIMIGFMFcGCCsGAQUFBzAChktodHRwOi8vY2VydGlmaWNhdGVzLnN0
YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvc2ZfdGxzX2lzc3VpbmdfZHYtcjF2
MS5jcnQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnN0YXJmaWVsZHRlY2guY29t
LzAfBgNVHSMEGDAWgBSZtG3djQxt+i2gnyIh6HPCGLyF2TArBgNVHREEJDAigg1z
Ym1iYW5rLmNvLmtlghF3d3cuc2JtYmFuay5jby5rZTAdBgNVHQ4EFgQULh9Q6Yd1
bPH9teQrgcUrL2SHiDAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AJROQ4f6
7MHvgfMZJCaoGGUBx9NfOAIBP3JnfVU3LhnYAAABoU6yDSUAAAQDAEgwRgIhAMPt
NnFER8vFLlGLH9pdlB0mH/9AwCs8jEeOrOXBbkFHAiEAiQ4cBYcVnyNJL4E2Jx6+
k6PjaAB3JCa7c8ncQonYMJUAdgDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1rXaa
2Q5SzQAAAaFOsg3PAAAEAwBHMEUCIQCExDksRO6Qu1T0y3QZ+9h8My/FBVOTZ/2D
TQ1fmSo0gwIgHCCQuV8Hdfl1kRIhRfkY/Y7aTCQA8DhhRu9a+iWwVR4AdgDLOPcV
iXyEoURfW8Hd+8lu8ppZzUcKaQWFsMsUwxRY5wAAAaFOsg5rAAAEAwBHMEUCIBoX
tMxkdIvpdy/ZSSa2AZVfskMTYZCrYA2WwYwaaNMjAiEA9VzW/6qMY+7FcrzXSP51
to/N1CA1dG8/hpso5EMLJCIwDQYJKoZIhvcNAQELBQADggIBAFSDgjWzIKyD6E12
aQhqD42td5I1wpK72a6HcYBBHeC3J3Jf2UEbT02k3RJR4l7p7GVlPhYEUMjPa+DK
oiLvbOFHE1s3g9EkAUEU8TAoD3F/axTeYJ5bf1JF2JIXQ+QOoeoh8oONZSU1tRbg
hsjsbdfgy6MCbOkBROoHB+hGg+5Z6gbqJZTfQin9nOTJxA/Fpb8I0vk7+WXhurNd
qsEo9FIjiaes9aCExCQiD25cDq3yqkMLQP5r/cuBftUM0Re/y+n/PPj/TZVHh0c2
aluLNb9H8+uqLtmInxbE5tnSYexCSDqmYnbaNiD2tT7E/y1KHz9kgSxuxej5XPZK
BSM3FW7kA4WyXEZ5/6Ixb67EPm9YbOQksR+AW9+sbGcNxSxQVc2IhrnjBM/hRoc5
K8XE7l3PjHlT6gBRX5+KC9o+ySmGZIuybDuK0DZtNtAWX6A19eZUmhAt9GAdhNrl
vNaJu80n34U0mjHSdbbV962KTVabsUjqQDT3TdFmL7W4KDiybajHwGw1rkJdpKbs
9IOAIbIPdJMbfB/IfF4eRMVItmFpByJ61ceCJ6eYVOwGx9FL8pAnsEUL8t/oNPBy
m6hS/YQYbkYljGPz//INB41i7ePJuGTRiP0AOM1hOgXgZeccVmNQriFc52RWky57
BL4ImcEmSREdlL86THt1bge+RYWW
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-06T21:01:17+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Starfield Technologies CN=Starfield TLS Intermediate CA DV - R1v1
Issuer
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Valid from
2025-08-27T12:00:00+00:00
Expires
2040-08-23T11:59:59+00:00
Days remaining
5038
Serial (hex)
C5E225A10DF67804EC5305DCF38E5234
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

06:89:1C:34:A2:E4:68:7C:63:0B:29:85:0C:C9:F6:D4:5D:ED:39:49:1C:F8:77:C7:24:6B:6E:C6:33:58:7A:2C
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
99:B4:6D:DD:8D:0C:6D:FA:2D:A0:9F:22:21:E8:73:C2:18:BC:85:D9
authorityKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sf_tls_root-r1.crt
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sf_tls_root-r1.crl 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Starfield Technologies CN=Starfield TLS Root CA - R1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Root Certificate Authority - G2
Valid from
2025-09-24T12:00:00+00:00
Expires
2037-12-31T23:59:59+00:00
Days remaining
4073
Serial (hex)
466702AA31941FA2C196EFE6D09BAF6C
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

26:A9:3D:60:03:90:77:65:4C:0D:DA:1F:B6:34:AF:5F:F5:C1:14:C7:AC:1F:D0:44:9B:1C:9D:21:78:B0:28:FF
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE
subjectKeyIdentifier
65:79:A6:5B:CD:9B:07:16:A5:40:86:B7:49:8E:22:47:C6:0B:DE:4B
authorityKeyIdentifier
7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
authorityInfoAccess
CA Issuers - URI:http://certificates.starfieldtech.com/repository/sfroot-g2.crt
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.1
crlDistributionPoints
Full Name: URI:http://crl.starfieldtech.com/sfroot-g2.crl 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →