DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

sdsu.edu · 104.20.12.66:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=California O=San Diego State University CN=www.sdsu.edu
Issuer
C=US O=Internet2 CN=InCommon RSA Server CA 2
Valid from
2026-03-11T00:00:00+00:00
Expires
2027-03-11T23:59:59+00:00
Days remaining
117
Serial (hex)
14EB901C0ECA5A18040805BDAD16847D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:www.sdsu.edu, DNS:*.sdsu.edu, DNS:sdsu.edu, DNS:www.engineering.sdsu.edu, DNS:www.foundation.sdsu.edu

SHA-256 fingerprint

3E:7A:AC:BD:33:B8:27:CF:53:3B:76:EA:72:D7:72:81:B6:0A:10:4F:10:30:C2:C1:5F:B5:4A:FD:AC:3F:9C:38
Certificate extensions & PEM
authorityKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
subjectKeyIdentifier
97:0E:3F:14:36:27:0A:38:D7:CB:16:0B:AA:A6:59:93:19:27:80:A4
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/InCommonRSAServerCA2.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/InCommonRSAServerCA2.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Mar 11 22:51:45.274 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0D:B2:79:9B:84:57:1F:64:69:9E:03:B5: 87:0C:3D:DC:CB:AF:56:5F:BD:ED:6E:20:98:D6:F3:88: 32:C8:32:7B:02:20:04:05:48:2C:29:BF:97:EF:49:23: 41:D0:53:46:4E:1C:77:E2:C9:AC:12:60:E4:47:CF:78: A9:EB:1D:80:A4:29 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Mar 11 22:51:45.774 2026 GMT Extensions: 00:00:05:00:03:17:E0:72 Signature : ecdsa-with-SHA256 30:46:02:21:00:AC:92:4A:40:85:34:ED:47:7D:14:3E: 1F:66:CB:97:71:35:0F:09:08:C7:BC:1E:35:DA:15:00: A3:FD:86:33:31:02:21:00:B4:D8:11:7C:72:4E:69:11: 8B:5F:80:2F:88:4A:AE:12:A8:CA:99:65:AC:AE:37:AB: 83:9E:91:5E:1C:4F:83:7C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Mar 11 22:51:45.233 2026 GMT Extensions: 00:00:05:00:00:38:21:C8 Signature : ecdsa-with-SHA256 30:46:02:21:00:D4:EC:38:3F:6C:F7:23:54:E7:FF:6C: FB:E0:18:69:70:39:E7:62:0F:C1:5D:78:28:3D:19:3A: 6D:22:4D:E9:DD:02:21:00:FC:3C:B0:56:3C:86:26:88: 94:C3:6E:E9:68:C7:5A:ED:18:54:C9:4D:21:34:EB:01: E9:C0:ED:20:34:37:1C:99
subjectAltName
DNS:www.sdsu.edu, DNS:*.sdsu.edu, DNS:sdsu.edu, DNS:www.engineering.sdsu.edu, DNS:www.foundation.sdsu.edu
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-14T07:11:54+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=Internet2 CN=InCommon RSA Server CA 2
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2022-11-16T00:00:00+00:00
Expires
2032-11-15T23:59:59+00:00
Days remaining
2193
Serial (hex)
835B7615206D2D6E097E0B6E409FEFC0
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:E0:1C:C4:DD:0C:9D:92:A3:DB:D4:90:92:FF:13:F9:CD:38:74:45:CD:C5:7E:5B:98:4E:1B:77:21:B5:B0:29
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
EF:4C:00:92:A6:FB:76:2E:5E:95:E2:C9:5F:87:1B:19:D5:4D:E2:D9
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.103 Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----
MIIGSjCCBDKgAwIBAgIRAINbdhUgbS1uCX4LbkCf78AwDQYJKoZIhvcNAQEMBQAw
gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIy
MTExNjAwMDAwMFoXDTMyMTExNTIzNTk1OVowRDELMAkGA1UEBhMCVVMxEjAQBgNV
BAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5Db21tb24gUlNBIFNlcnZlciBDQSAy
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAifBcxDi60DRXr5dVoPQi
Q/w+GBE62216UiEGMdbUt7eSiIaFj/iZ/xiFop0rWuH4BCFJ3kSvQF+aIhEsOnuX
R6mViSpUx53HM5ApIzFIVbd4GqY6tgwaPzu/XRI/4Dmz+hoLW/i/zD19iXvS95qf
NU8qP7/3/USf2/VNSUNmuMKlaRgwkouue0usidYK7V8W3ze+rTFvWR2JtWKNTInc
NyWD3GhVy/7G09PwTAu7h0qqRyTkETLf+z7FWtc8c12f+SfvmKHKFVqKpNPtgMkr
wqwaOgOOD4Q00AihVT+UzJ6MmhNPGg+/Xf0BavmXKCGDTv5uzQeOdD35o/Zw16V4
C4J4toj1WLY7hkVhrzKG+UWJiSn8Hv3dUTj4dkneJBNQrUfcIfTHV3gCtKwXn1eX
mrxhH+tWu9RVwsDegRG0s28OMdVeOwljZvYrUjRomutNO5GzynveVxJVCn3Cbn7a
c4L+5vwPNgs04DdOAGzNYdG5t6ryyYPosSLH2B8qDNzxAgMBAAGjggFwMIIBbDAf
BgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQU70wAkqb7
di5eleLJX4cbGdVN4tkwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8C
AQAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIGA1UdIAQbMBkwDQYL
KwYBBAGyMQECAmcwCAYGZ4EMAQICMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9j
cmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9y
aXR5LmNybDBxBggrBgEFBQcBAQRlMGMwOgYIKwYBBQUHMAKGLmh0dHA6Ly9jcnQu
dXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FBQUFDQS5jcnQwJQYIKwYBBQUHMAGG
GWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBACaA
DTTkHq4ivq8+puKE+ca3JbH32y+odcJqgqzDts5bgsapBswRYypjmXLel11Q2U6w
rySldlIjBRDZ8Ah8NOs85A6MKJQLaU9qHzRyG6w2UQTzRwx2seY30Mks3ZdIe9rj
s5rEYliIOh9Dwy8wUTJxXzmYf/A1Gkp4JJp0xIhCVR1gCSOX5JW6185kwid242bs
Lm0vCQBAA/rQgxvLpItZhC9US/r33lgtX/cYFzB4jGOd+Xs2sEAUlGyu8grLohYh
kgWN6hqyoFdOpmrl8yu7CSGV7gmVQf9viwVBDIKm+2zLDo/nhRkk8xA0Bb1BqPzy
bPESSVh4y5rZ5bzB4Lo2YN061HV9+HDnnIDBffNIicACdv4JGyGfpbS6xsi3UCN1
5ypaG43PJqQ0UnBQDuR60io1ApeSNkYhkaHQ9Tk/0C4A+EM3MW/KFuU53eHLVlX9
ss1iG2AJfVktaZ2l/SbY7py8JUYMkL/jqZBRjNkD6srsmpJ6utUMmAlt7m1+cTX8
6/VEBc5Dp9VfuD6hNbNKDSg7YxyEVaBqBEtN5dppj4xSiCrs6LxLHnNo3rG8VJRf
NVQdgFbMb7dOIBokklzfmU69lS0kgyz2mZMJmW2G/hhEdddJWHh3FcLi2MaeYiOV
RFrLHtJvXEdf2aEaZ0LOb2Xo3zO6BJvjXldv2woN
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →