DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

suny.edu · 172.64.152.188:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=New York L=Albany O=State University of New York CN=www.suny.edu
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2026-01-15T00:00:00+00:00
Expires
2027-01-15T23:59:59+00:00
Days remaining
110
Serial (hex)
0AEB5D968AA2BF554CDBA39905973F01
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.suny.edu, DNS:suny.edu

SHA-256 fingerprint

C4:05:FF:CD:17:68:9C:AE:E0:50:5B:73:EC:B6:7F:63:02:72:48:FB:B6:63:86:97:11:3D:03:5E:71:7D:A6:C2
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
B8:42:F8:44:B3:CD:04:39:83:F7:44:CB:8B:60:6F:D4:7C:40:6C:42
subjectAltName
DNS:www.suny.edu, DNS:suny.edu
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Jan 15 19:39:56.666 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:7E:6A:B8:90:FD:F4:2F:04:3C:95:C8:E4: 08:1F:50:94:3E:B9:62:90:59:67:3E:EA:2D:37:CD:B9: 8B:8D:82:1D:02:20:0B:17:B6:43:EB:BB:FC:1E:0D:A5: D2:E7:0D:CA:F2:2B:ED:58:DA:13:53:C9:76:5B:0F:DA: F2:2D:16:31:88:C6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jan 15 19:39:56.685 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4D:34:B5:03:B2:F7:08:2C:8D:13:EB:5B: 58:BE:EA:A8:B3:39:61:E7:F5:F6:D6:13:3C:63:07:E1: AA:23:B7:87:02:21:00:E3:53:F5:0F:31:CD:49:22:9D: D9:DA:D6:35:3A:37:13:21:2D:FB:27:72:2B:34:BD:30: EB:99:A7:ED:A3:5E:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jan 15 19:39:56.881 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8C:7B:C4:A9:DC:6B:8F:9F:39:02:87: 6B:9D:1B:04:39:C0:78:A0:2B:76:11:E8:42:59:34:18: 62:62:B4:E5:28:02:21:00:D9:A0:C2:C8:84:62:34:7E: 0C:8D:FD:CC:21:26:51:09:03:3D:87:FD:CC:A7:F1:DF: 43:7D:DE:4E:E7:16:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-27T09:50:33+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-09-24T00:00:00+00:00
Expires
2030-09-23T23:59:59+00:00
Days remaining
1457
Serial (hex)
085F94C02D857BE8CC14FF53EDA23E2A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1F:8E:B9:E9:A8:E0:66:CC:5B:38:33:E0:6B:31:29:76:4B:62:26:39:D5:B1:63:F6:00:E1:C7:91:20:BF:3E:ED
Certificate extensions & PEM
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
Valid from
2024-01-18T00:00:00+00:00
Expires
2031-11-09T23:59:59+00:00
Days remaining
1869
Serial (hex)
0FE032AB844D033106C50C8E13C8B068
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
authorityKeyIdentifier
03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →