DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

surf.nl · 192.87.108.15:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL L=Utrecht O=SURF B.V. CN=surf.nl
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Valid from
2026-07-22T13:20:46+00:00
Expires
2027-02-06T13:20:45+00:00
Days remaining
113
Serial (hex)
6CDC9423ECC5D1FB122B19041A8638E8
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:surf.nl, DNS:www.surf.nl

SHA-256 fingerprint

7A:DE:E2:CF:17:3B:DB:D6:62:AF:C9:DD:5F:92:DF:A6:D9:CC:8C:78:5A:E3:1C:CB:51:3F:F0:95:70:2C:29:8A
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-E1.cer
subjectAltName
DNS:surf.nl, DNS:www.surf.nl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
subjectKeyIdentifier
8C:31:D4:AC:73:6B:18:BF:05:B6:8A:5C:CB:80:E7:4C:FC:48:7D:EE
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jul 22 13:30:48.385 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E5:E4:94:23:0A:88:9A:15:63:50:D9: 0A:2D:39:A8:F2:1C:98:1A:C9:64:84:E6:B6:5F:5A:76: FC:B7:9F:D2:68:02:21:00:C7:E6:5F:EB:24:06:9D:8E: 42:98:E5:4A:E9:9F:C8:49:54:CA:8A:04:DA:20:79:58: 2D:CD:90:70:BF:4B:7B:5C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 22 13:30:48.415 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B9:6A:2E:38:01:52:23:97:3A:91:C9: 7D:97:20:7C:B1:0D:5C:00:66:43:9E:9F:2B:F4:2C:E4: E8:F8:B6:C2:B3:02:21:00:9D:EB:03:48:B1:D2:E4:7A: 60:E6:69:4A:86:2A:3C:5D:B3:C7:37:04:5D:B1:2A:87: 74:4A:94:03:43:3A:F2:F8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 22 13:30:48.360 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C8:FB:2F:F5:B6:A0:9F:31:C9:BB:09: E7:54:E1:84:94:2C:D6:48:36:55:F2:32:F1:38:96:77: B5:13:27:20:E6:02:20:3B:C0:3C:CC:9C:9A:C8:4A:3D: 3F:C6:E1:01:26:08:5B:EC:6E:A9:87:A7:29:1C:F9:36: 8F:2D:56:A4:ED:43:50
-----BEGIN CERTIFICATE-----
MIIEozCCBCmgAwIBAgIQbNyUI+zF0fsSKxkEGoY46DAKBggqhkjOPQQDAzBgMQsw
CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh
cmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIEVDQyAxMB4X
DTI2MDcyMjEzMjA0NloXDTI3MDIwNjEzMjA0NVowRTELMAkGA1UEBhMCTkwxEDAO
BgNVBAcMB1V0cmVjaHQxEjAQBgNVBAoMCVNVUkYgQi5WLjEQMA4GA1UEAwwHc3Vy
Zi5ubDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJoIN4iKLYK33yGSaUuXSPP2
HU6RIOvLb+iFwy5fqJiR+ium5Vw4Be7ICRHkUVY8x29izj5/77V335+bf6kryoOj
ggLeMIIC2jAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFOmZBo0XH6v7lhpayFte
XV7s2pyPMEgGCCsGAQUFBwEBBDwwOjA4BggrBgEFBQcwAoYsaHR0cDovL2NydC5o
YXJpY2EuZ3IvSEFSSUNBLUdFQU5ULVRMUy1FMS5jZXIwHwYDVR0RBBgwFoIHc3Vy
Zi5ubIILd3d3LnN1cmYubmwwLQYDVR0gBCYwJDAIBgZngQwBAgIwCAYGBACPegEH
MA4GDCsGAQQBgc8RAQEBAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEw
PQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5oYXJpY2EuZ3IvSEFSSUNBLUdF
QU5ULVRMUy1FMS5jcmwwHQYDVR0OBBYEFIwx1Kxzaxi/BbaKXMuA50z8SH3uMA4G
A1UdDwEB/wQEAwIHgDCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAYEyar3p/
d18B1Ab8kg3ImesLHH34yVIb+voXdzuXi8kAAAGfigWQwQAABAMASDBGAiEA5eSU
IwqImhVjUNkKLTmo8hyYGslkhOa2X1p2/Lef0mgCIQDH5l/rJAadjkKY5Urpn8hJ
VMqKBNogeVgtzZBwv0t7XAB3AEaiOWfGDbZGh8ZvPfmZlHaTpqYRIIRX1VXn49Ch
2bZGAAABn4oFkN8AAAQDAEgwRgIhALlqLjgBUiOXOpHJfZcgfLENXABmQ56fK/Qs
5Oj4tsKzAiEAnesDSLHS5Hpg5mlKhio8XbPHNwRdsSqHdEqUA0M68vgAdgBEwr0M
6RQOZKXJSgGTClqhuzWXDgDuERaJaCocRNe1ZgAAAZ+KBZCoAAAEAwBHMEUCIQDI
+y/1tqCfMcm7CedU4YSULNZINlXyMvE4lne1Eycg5gIgO8A8zJyayEo9P8bhASYI
W+xuqYenKRz5No8tVqTtQ1AwCgYIKoZIzj0EAwMDaAAwZQIxAK0bOuo6vi6ic1pq
cVx0EVG9kysZ7fb3rfav5qfGXeLfjxZoaK82rUjfxLyvpMGhvAIwIZLThvgsTNVY
Co8C/7haYveazF4YLEMJ6l6kHpJBcjvju9aCztBw54lbUohYTNxa
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-15T20:26:11+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Valid from
2025-01-03T11:14:21+00:00
Expires
2039-12-31T11:14:20+00:00
Days remaining
4824
Serial (hex)
42FDDCE1261607E1A5E6935A400161DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6C:DF:0B:A1:71:1E:85:6D:22:8B:A0:0C:A0:4C:5C:1C:3D:79:94:4C:03:7B:71:3B:15:5A:4E:E4:B4:7E:C5:3C
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
subjectKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Issuer
C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions ECC RootCA 2015
Valid from
2021-09-02T07:44:37+00:00
Expires
2029-08-31T07:44:36+00:00
Days remaining
1050
Serial (hex)
716027C8857A73542DEF516C1C2EEB0F
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

50:E2:7F:90:EB:6A:F4:95:B0:E6:EE:B6:55:CC:89:44:4C:27:D3:C9:5B:68:23:FA:02:AB:DC:95:F1:63:6A:E1
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
B4:22:0B:82:99:24:01:0E:9C:BB:E4:0E:FD:BF:FB:97:20:93:99:2A
authorityInfoAccess
CA Issuers - URI:http://repo.harica.gr/certs/HaricaECCRootCA2015.crt
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HaricaECCRootCA2015.crl
subjectKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →