DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

schufa.de · 128.65.210.59:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Hessen L=Wiesbaden O=SCHUFA Holding AG CN=schufa.de
Issuer
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security ServerID OV Class 2 CA
Valid from
2026-04-02T14:29:44+00:00
Expires
2026-10-16T23:59:59+00:00
Days remaining
17
Serial (hex)
0C88AA3D6B81DC7C1DD931EDC912D463
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:schufa.de, DNS:schufa-ombudsmann.de, DNS:www.schufa-ombudsmann.de, DNS:schufa-ombudsfrau.de, DNS:www.schufa-ombudsfrau.de, DNS:www.schufa.de

SHA-256 fingerprint

2F:E9:07:CB:85:F6:64:6D:3A:73:88:EB:07:56:CE:60:DE:E6:D7:21:81:E8:27:CE:78:F9:4C:BC:C8:E9:ED:A9
Certificate extensions & PEM
authorityKeyIdentifier
1C:05:93:B1:7F:A8:34:30:8C:52:E0:96:40:A0:72:A3:10:5D:E0:FF
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
subjectKeyIdentifier
4F:81:96:CF:EA:78:8E:68:5A:BD:B9:05:A3:66:A3:34:B8:2E:B2:B1
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://docs.serverid.telesec.de/cps/serverid.htm
crlDistributionPoints
Full Name: URI:http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl
authorityInfoAccess
OCSP - URI:http://ocsp.serverid.telesec.de/ocspr CA Issuers - URI:http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt
basicConstraints
CA:FALSE
subjectAltName
DNS:schufa.de, DNS:schufa-ombudsmann.de, DNS:www.schufa-ombudsmann.de, DNS:schufa-ombudsfrau.de, DNS:www.schufa-ombudsfrau.de, DNS:www.schufa.de
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19: D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27 Timestamp : Apr 2 14:29:46.498 2026 GMT Extensions: 00:00:05:00:05:48:D7:D0 Signature : ecdsa-with-SHA256 30:44:02:20:55:86:96:F9:D4:66:48:DB:CE:26:53:B3: 66:D3:8E:DD:8F:E2:5B:BD:E2:CD:79:62:A2:78:F4:BA: 24:C9:E1:62:02:20:27:72:CC:F9:06:C9:BA:5E:54:9E: 59:48:EA:C7:DD:E0:5E:29:2D:19:87:9F:34:E8:BC:88: 95:43:0F:D6:8A:53 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : Apr 2 14:29:47.150 2026 GMT Extensions: 00:00:05:00:05:74:08:0C Signature : ecdsa-with-SHA256 30:45:02:21:00:AF:B0:7A:98:B5:EC:FB:05:88:34:2E: 5C:D6:EB:86:03:ED:D8:61:D8:EF:C3:73:8E:BC:DA:E3: 67:68:F5:1A:59:02:20:51:D4:E2:C7:1E:5B:7A:C4:D0: 7D:73:F2:91:84:FE:76:BA:0C:1E:34:99:2D:18:AE:E0: CD:F0:F1:58:93:50:12 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Apr 2 14:29:46.171 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:CF:B0:55:C0:DB:9D:E0:C8:C3:F9:A4: C7:02:15:21:19:15:30:48:AC:09:DF:E7:6F:E5:94:68: 71:A8:65:5F:72:02:20:49:F3:C0:B7:4F:B4:F4:5F:FB: 78:76:D5:E3:8E:04:66:93:EE:59:AF:06:2E:5B:BC:CF: 14:49:F4:F7:69:C0:A6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:AF:86:3D:3B:3E:E5:9F:A5:77:DE:A8:24:5D:36:B0: D9:ED:22:A2:23:F4:61:77:41:22:94:52:EE:95:50:5F Timestamp : Apr 2 14:29:46.330 2026 GMT Extensions: 00:00:05:00:02:C8:74:B4 Signature : ecdsa-with-SHA256 30:45:02:21:00:C2:76:6B:86:23:27:EC:F3:65:E7:AD: 3A:83:32:1E:98:CF:3A:D5:1A:C4:D9:98:1E:51:D7:3A: 75:91:87:41:F9:02:20:62:D9:E8:DB:85:48:D9:73:C9: 1B:89:7A:F1:FA:36:A0:0D:A1:64:88:61:AF:F2:9C:74: 5C:C6:0A:E1:A8:68:FC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Apr 2 14:29:46.269 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A8:00:57:C2:F2:FB:06:92:83:16:E4: 45:75:A6:58:29:F5:EF:76:E5:EA:B2:64:27:97:CC:FF: 43:5B:D1:A9:30:02:21:00:CF:27:CC:5B:8E:80:44:51: 64:E8:D6:3E:83:48:12:AC:6D:5E:33:92:99:E9:82:A8: EE:1C:B8:0A:DF:67:FC:DB
-----BEGIN CERTIFICATE-----
MIIJvjCCCCagAwIBAgIQDIiqPWuB3Hwd2THtyRLUYzANBgkqhkiG9w0BAQsFADBo
MQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0
eSBHbWJIMTAwLgYDVQQDDCdUZWxla29tIFNlY3VyaXR5IFNlcnZlcklEIE9WIENs
YXNzIDIgQ0EwHhcNMjYwNDAyMTQyOTQ0WhcNMjYxMDE2MjM1OTU5WjBiMQswCQYD
VQQGEwJERTEPMA0GA1UECBMGSGVzc2VuMRIwEAYDVQQHEwlXaWVzYmFkZW4xGjAY
BgNVBAoTEVNDSFVGQSBIb2xkaW5nIEFHMRIwEAYDVQQDEwlzY2h1ZmEuZGUwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCp+trpFtXobt/U81ixDAWub20x
5KHjG60hXVwm4jcr7U96OrL/VbhKr/p0S5iohHWyWgHUQXxOFovP1KF3wve45nc/
34YM6GzOkqfznqQFkVDCiC7cyOvTd5ZLPNFQWB+qmvd6u2Uc60nqYjtxsoEYqJFS
ei0NsaNkLcYlI8BZoaP+uBSRc5qd+keUDVHckmRpnqiuug7+gAYl2C8RTTMcOWi8
fIh1e80u066me5tHIgYTvvPjaYpzeKK/Tb7weaoyHXzSvyTWOP+NnyT+hAzDlV2O
AJJlegav1dzkWUc0ihUaK6FVZEthb/y/61+oVJ1Lmvg/c16WhzJ2fC6l3b75bzfp
EfdP0eYTQV/M9OMOBC694Sb9fl6DD3BAzEa+y2eWHNciG2Fse1x1rIyIr69MggBS
cZPbjYJMgukm58fcNZD8Wpnjv3b6Aj7J3y3sNWoJY+14RE8uoreiOEioONLEwxXy
8mJZidYAPKZIxkFXEtBkA5ZuXxjx3RE7aT98YCAwSbliKgA0aNOgxGejQqBT6F2Z
EbYqWx3WngS9CRU1/ShU48hNq48bgxUmvbMah01j5yKLOl0y6kUq3gX7HDZb0gDo
6WLjO6T6aNXoNKGRNHq6JsdP8LMI4s7veI0jKdSsW8Q+oR5g++JQIJFGGppJuPwq
fYIJ5UMa2I749TTNfwIDAQABo4IE6DCCBOQwHwYDVR0jBBgwFoAUHAWTsX+oNDCM
UuCWQKByoxBd4P8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATAdBgNVHQ4EFgQUT4GWz+p4jmhavbkFo2ajNLgusrEwUwYDVR0g
BEwwSjBIBgZngQwBAgIwPjA8BggrBgEFBQcCARYwaHR0cDovL2RvY3Muc2VydmVy
aWQudGVsZXNlYy5kZS9jcHMvc2VydmVyaWQuaHRtMF4GA1UdHwRXMFUwU6BRoE+G
TWh0dHA6Ly9jcmwuc2VydmVyaWQudGVsZXNlYy5kZS9ybC9UZWxla29tX1NlY3Vy
aXR5X1NlcnZlcklEX09WX0NsYXNzXzJfQ0EuY3JsMIGfBggrBgEFBQcBAQSBkjCB
jzAxBggrBgEFBQcwAYYlaHR0cDovL29jc3Auc2VydmVyaWQudGVsZXNlYy5kZS9v
Y3NwcjBaBggrBgEFBQcwAoZOaHR0cDovL2NydC5zZXJ2ZXJpZC50ZWxlc2VjLmRl
L2NydC9UZWxla29tX1NlY3VyaXR5X1NlcnZlcklEX09WX0NsYXNzXzJfQ0EuY3J0
MAwGA1UdEwEB/wQCMAAwgYMGA1UdEQR8MHqCCXNjaHVmYS5kZYIUc2NodWZhLW9t
YnVkc21hbm4uZGWCGHd3dy5zY2h1ZmEtb21idWRzbWFubi5kZYIUc2NodWZhLW9t
YnVkc2ZyYXUuZGWCGHd3dy5zY2h1ZmEtb21idWRzZnJhdS5kZYINd3d3LnNjaHVm
YS5kZTCCAoYGCisGAQQB1nkCBAIEggJ2BIICcgJwAH0AqCbL4wrGNRJGUz/gZfFP
GdluGQgTxB3ZbXkAsxI8VScAAAGdTpmpggAIAAAFAAVI19AEAwBGMEQCIFWGlvnU
ZkjbziZTs2bTjt2P4lu94s15YqJ49LokyeFiAiAncsz5Bsm6XlSeWUjqx93gXikt
GYefNOi8iJVDD9aKUwB+AGz+UBlDqF6pFrxS0TPk3Mke8UEcfSWEINFzgJ4YGOs6
AAABnU6ZrA4ACAAABQAFdAgMBAMARzBFAiEAr7B6mLXs+wWINC5c1uuGA+3YYdjv
w3OOvNrjZ2j1GlkCIFHU4sceW3rE0H1z8pGE/na6DB40mS0YruDN8PFYk1ASAHYA
yKPEf8ezrbk1awE/anoSbeM6TkOlxkb5l605dZkdz5oAAAGdTpmoOwAABAMARzBF
AiEAz7BVwNud4MjD+aTHAhUhGRUwSKwJ3+dv5ZRocahlX3ICIEnzwLdPtPRf+3h2
1eOOBGaT7lmvBi5bvM8USfT3acCmAH4ARq+GPTs+5Z+ld96oJF02sNntIqIj9GF3
QSKUUu6VUF8AAAGdTpmo2gAIAAAFAALIdLQEAwBHMEUCIQDCdmuGIyfs82XnrTqD
Mh6YzzrVGsTZmB5R1zp1kYdB+QIgYtno24VI2XPJG4l68fo2oA2hZIhhr/KcdFzG
CuGoaPwAdwCvZ4g7V7BO3Y+m2X72LqjrgQrHcWDwJF5V1gwv54WHOgAAAZ1Omaid
AAAEAwBIMEYCIQCoAFfC8vsGkoMW5EV1plgp9e925eqyZCeXzP9DW9GpMAIhAM8n
zFuOgERRZOjWPoNIEqxtXjOSmemCqO4cuArfZ/zbMA0GCSqGSIb3DQEBCwUAA4IB
gQAZSd4sMHm8A24tRX5cHcTX5CI+WBSJ9AGiATds4RDL8c4uZhswQ5j6jW9BLhKJ
irq7kDM9VbaFuqGBrdCA3iIzQEd11uprYdpCqfv/uwBE2m9ocijRW8BZNl56RYx3
/YruXEpJAVIskeWYjY2Cogl9QRMqHXTAe1mj8qja7inyT4rLNH0i08mtMq/bJwWl
Jo3vkb9jAD28OxwDS9kEYt4cV3wvAJ00g+cRDiqHholX860KsfIc9YPOel7XTd3+
6iQi5qkidF0FbRMzTwyjez+uKEnwXnWrTX4HhuLrXOIICjgRvkvvFauNhD2p0t+Y
0djYYxKVnbEf0xpSRud4JIGTUR71SaNjqopNi6ooPPdP6C5+Sd6QJBz90H0+7UOD
2c/mwpjVgAxParOvP1e+7bRgbfQ/2cGJXO5x0U6+JbNYOCCKwYVU0rW/YewToZq0
2GvmGMTjv/BvArxHqPRvsVh90eiRL3+C+OXBordjJYx99FhtuiXR2FD+KH+cJYYI
ByE=
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-29T00:54:22+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security ServerID OV Class 2 CA
Issuer
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Valid from
2022-08-02T09:16:44+00:00
Expires
2027-08-02T23:59:59+00:00
Days remaining
307
Serial (hex)
0E5D298915C40431A4E1C4CA488B8EA3
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

94:4A:CE:96:1D:B3:16:BE:B6:94:E0:1C:30:2C:46:FE:D4:0D:C0:29:17:29:E7:DA:F5:85:50:C3:CB:55:E7:91
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
1C:05:93:B1:7F:A8:34:30:8C:52:E0:96:40:A0:72:A3:10:5D:E0:FF
authorityKeyIdentifier
BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://grcl2.crl.telesec.de/rl/T-TeleSec_GlobalRoot_Class_2.crl
authorityInfoAccess
OCSP - URI:http://grcl2.ocsp.telesec.de/ocspr CA Issuers - URI:http://grcl2.crt.telesec.de/crt/T-TeleSec_GlobalRoot_Class_2.crt
certificatePolicies
Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →