DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

surfnet.nl · 145.100.190.243:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL L=Utrecht O=SURF B.V. CN=surfnet.nl
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Valid from
2026-07-22T13:23:43+00:00
Expires
2027-02-06T13:23:42+00:00
Days remaining
136
Serial (hex)
0FE78A86D97F6DE8E0D8027A577F0FEC
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:surfnet.nl, DNS:www.surfnet.nl

SHA-256 fingerprint

C2:BE:B6:82:EB:6C:D2:7D:25:0D:A1:69:70:B5:92:43:AD:F1:1B:3B:AB:7D:C7:11:15:CB:AC:4C:43:85:8D:BE
Certificate extensions & PEM
basicConstraints
CA:FALSE
authorityKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-E1.cer
subjectAltName
DNS:surfnet.nl, DNS:www.surfnet.nl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
subjectKeyIdentifier
CF:BD:FE:74:8E:24:F7:C3:FD:A5:4E:E2:E1:C2:B5:68:EF:60:6E:AF
keyUsage
Digital Signature
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Jul 22 13:33:44.745 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:9C:52:E1:3E:D5:1E:BB:53:9B:E8:6B: B1:47:1D:D8:D2:AC:67:7D:50:47:59:A8:A4:A6:6B:0C: CA:4F:82:DA:E2:02:21:00:E2:09:8C:AC:0B:EA:93:7F: 0E:9C:E7:87:51:C2:17:4D:62:55:07:09:AC:92:B9:5A: 5D:DC:F5:77:BB:A6:C9:D6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Jul 22 13:33:44.777 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:FF:C8:D0:A2:72:4C:80:3A:5B:09:40: B6:19:80:25:C5:03:89:2D:64:6D:83:40:30:9D:CE:D1: 17:AF:DF:93:D4:02:21:00:EA:14:9E:6E:17:19:25:F3: 67:7C:B1:C4:1A:99:71:DE:14:43:65:46:32:86:51:AD: 20:86:75:41:73:EA:02:44 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Jul 22 13:33:44.725 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:96:52:F2:B0:50:C0:A7:4D:99:85:82: B9:40:77:31:92:0C:2A:89:8F:B8:F8:00:F8:E9:AA:E4: BF:21:37:87:18:02:21:00:A3:FA:8A:46:17:5F:9C:B4: 5F:7D:59:1F:68:81:FD:08:EA:BB:5E:59:74:79:BC:BC: 3D:EC:6D:B2:DB:C8:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-23T09:38:07+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS ECC 1
Issuer
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Valid from
2025-01-03T11:14:21+00:00
Expires
2039-12-31T11:14:20+00:00
Days remaining
4847
Serial (hex)
42FDDCE1261607E1A5E6935A400161DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

6C:DF:0B:A1:71:1E:85:6D:22:8B:A0:0C:A0:4C:5C:1C:3D:79:94:4C:03:7B:71:3B:15:5A:4E:E4:B4:7E:C5:3C
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
authorityKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
authorityInfoAccess
CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-ECC.cer
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
subjectKeyIdentifier
E9:99:06:8D:17:1F:AB:FB:96:1A:5A:C8:5B:5E:5D:5E:EC:DA:9C:8F
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS ECC Root CA 2021
Issuer
C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions ECC RootCA 2015
Valid from
2021-09-02T07:44:37+00:00
Expires
2029-08-31T07:44:36+00:00
Days remaining
1072
Serial (hex)
716027C8857A73542DEF516C1C2EEB0F
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

50:E2:7F:90:EB:6A:F4:95:B0:E6:EE:B6:55:CC:89:44:4C:27:D3:C9:5B:68:23:FA:02:AB:DC:95:F1:63:6A:E1
Certificate extensions & PEM
basicConstraints
CA:TRUE
authorityKeyIdentifier
B4:22:0B:82:99:24:01:0E:9C:BB:E4:0E:FD:BF:FB:97:20:93:99:2A
authorityInfoAccess
CA Issuers - URI:http://repo.harica.gr/certs/HaricaECCRootCA2015.crt
certificatePolicies
Policy: X509v3 Any Policy
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.harica.gr/HaricaECCRootCA2015.crl
subjectKeyIdentifier
C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
keyUsage
Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →