DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

surfcert.nl · 145.100.190.243:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL L=Utrecht O=SURF B.V. CN=surfcert.nl
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Valid from
2026-07-22T13:21:41+00:00
Expires
2027-02-06T13:21:40+00:00
Days remaining
136
Serial (hex)
3D3D24AC7E3A5E77572F6AE15E850D27
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:surfcert.nl, DNS:www.surfcert.nl

SHA-256 fingerprint

0F:9B:BF:17:E2:51:4A:47:D9:24:8A:37:66:73:17:15:48:E5:0A:B1:4E:40:6B:A8:BE:61:02:CA:01:E9:FD:E1
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-E1.cer
subjectAltName
DNS:surfcert.nl, DNS:www.surfcert.nl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
subjectKeyIdentifier
07:83:7E:8E:A7:E4:15:45:26:89:DD:24:F2:F6:37:B8:9C:D0:18:03
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jul 22 13:31:43.383 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:38:58:28:DE:BE:C8:1E:48:B9:A7:40:1C: B1:9F:6C:68:6D:D2:71:F9:41:F4:44:58:90:81:BC:ED: 0F:6E:4B:9A:02:20:1A:1D:A9:78:06:71:22:83:33:F3: E9:D1:C8:1F:B7:63:F1:22:AD:95:E7:B3:D2:29:33:8B: 3A:61:E7:C8:AC:EF Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 22 13:31:43.415 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:15:52:2C:69:41:E9:46:0B:B5:2C:CD:AE: 91:E0:AC:14:B0:1D:A2:7D:53:A3:9C:75:75:02:FA:8E: A3:60:86:BD:02:20:0E:57:93:57:A2:63:7D:7C:38:92: CE:3B:2F:BA:39:FF:91:D9:56:1F:00:DC:81:A3:69:B3: 80:53:CD:1C:47:63 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 22 13:31:43.363 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D3:AB:D6:3D:A7:68:37:1D:9A:F7:2F: 84:E3:88:8B:89:7D:1A:79:12:BE:7F:B5:65:4B:14:EA: AF:F2:A9:71:20:02:20:10:DD:E6:A4:65:00:4E:3A:9D: 45:16:2A:CA:2A:9D:73:D4:C7:8F:75:8A:B8:6E:35:16: B4:27:57:6D:3C:C1:B6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-22T17:06:52+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Valid from
2025-01-03T11:14:21+00:00
Expires
2039-12-31T11:14:20+00:00
Days remaining
4847
Serial (hex)
42FDDCE1261607E1A5E6935A400161DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6C:DF:0B:A1:71:1E:85:6D:22:8B:A0:0C:A0:4C:5C:1C:3D:79:94:4C:03:7B:71:3B:15:5A:4E:E4:B4:7E:C5:3C
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
subjectKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Issuer
C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions ECC RootCA 2015
Valid from
2021-09-02T07:44:37+00:00
Expires
2029-08-31T07:44:36+00:00
Days remaining
1073
Serial (hex)
716027C8857A73542DEF516C1C2EEB0F
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

50:E2:7F:90:EB:6A:F4:95:B0:E6:EE:B6:55:CC:89:44:4C:27:D3:C9:5B:68:23:FA:02:AB:DC:95:F1:63:6A:E1
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
B4:22:0B:82:99:24:01:0E:9C:BB:E4:0E:FD:BF:FB:97:20:93:99:2A
authorityInfoAccess
CA Issuers - URI:http://repo.harica.gr/certs/HaricaECCRootCA2015.crt
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HaricaECCRootCA2015.crl
subjectKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →