DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

t-systems.com · 3.125.164.65:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=DE ST=Nordrhein-Westfalen L=Bonn O=Deutsche Telekom IT GmbH CN=t-systems.com
Issuer
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security ServerID OV Class 2 CA
Valid from
2025-12-01T11:31:45+00:00
Expires
2026-12-05T23:59:59+00:00
Days remaining
66
Serial (hex)
2C85BBC640D52B85E08C253B198AA86E
Signature
RSA-SHA256
Public key
EC 256 prime256v1

Subject alternative names (SAN)

DNS:t-systems.com, DNS:www.t-systems.com

SHA-256 fingerprint

1E:EC:0D:1B:01:B1:81:F3:AC:21:37:0F:FB:4E:37:16:2C:D0:ED:F6:15:62:9C:B6:61:07:01:D0:C8:AA:36:1A
Certificate extensions & PEM
authorityKeyIdentifier
1C:05:93:B1:7F:A8:34:30:8C:52:E0:96:40:A0:72:A3:10:5D:E0:FF
keyUsage
Digital Signature, Key Agreement
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
subjectKeyIdentifier
69:40:2F:0C:AF:63:0B:85:58:94:62:6F:60:C4:E3:1D:C8:4A:83:16
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://docs.serverid.telesec.de/cps/serverid.htm
crlDistributionPoints
Full Name: URI:http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl
authorityInfoAccess
OCSP - URI:http://ocsp.serverid.telesec.de/ocspr CA Issuers - URI:http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt
basicConstraints
CA:FALSE
subjectAltName
DNS:t-systems.com, DNS:www.t-systems.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Dec 1 11:31:46.641 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C5:4F:D7:EF:3F:B8:C9:2F:3E:2F:A6: F8:46:AE:D3:E6:2C:18:1D:8A:BE:FE:64:44:46:16:DE: ED:B2:6F:59:00:02:21:00:8F:1F:67:27:A1:D9:E8:9E: 7D:6F:06:B1:3D:CC:2D:D9:98:0D:BA:3B:41:91:D1:89: E1:92:A2:50:D5:02:15:AE Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Dec 1 11:31:46.636 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:17:14:AF:5A:9E:72:38:27:32:5E:60:1A: EF:64:31:63:04:1C:1C:8B:A9:AD:E7:0F:1C:D3:9A:0E: B1:8B:68:84:02:21:00:89:D5:45:0C:C7:9C:30:F1:C3: D8:01:B8:F5:A3:7B:8C:CF:E9:3D:53:64:53:DD:A5:56: 2C:B4:B2:48:7B:05:C6 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Dec 1 11:31:46.885 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F1:2A:80:83:0E:25:04:6B:79:8D:5F: 5B:68:6C:B5:C1:7F:83:1D:91:50:1C:FA:C1:29:D9:12: 4A:AC:D6:89:AB:02:20:73:56:05:0C:97:31:B7:77:AD: BA:93:C9:86:E5:F9:0C:03:10:51:FE:F3:3E:AB:81:9C: 88:B2:27:01:90:A2:D5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Dec 1 11:31:47.049 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:B0:F8:8D:9C:E7:7F:DF:0E:B6:5D:DF: 55:AA:3A:2B:1B:44:11:73:E9:38:0C:B9:86:5D:12:E4: F9:44:6E:1F:3D:02:20:72:3D:82:E6:29:77:8C:6A:CD: B3:AA:E6:BF:5F:52:93:C9:8A:F3:C5:77:3D:66:81:02: EB:B6:B7:5A:06:6A:12
-----BEGIN CERTIFICATE-----
MIIHHjCCBYagAwIBAgIQLIW7xkDVK4XgjCU7GYqobjANBgkqhkiG9w0BAQsFADBo
MQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0
eSBHbWJIMTAwLgYDVQQDDCdUZWxla29tIFNlY3VyaXR5IFNlcnZlcklEIE9WIENs
YXNzIDIgQ0EwHhcNMjUxMjAxMTEzMTQ1WhcNMjYxMjA1MjM1OTU5WjB1MQswCQYD
VQQGEwJERTEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjENMAsGA1UEBxME
Qm9ubjEhMB8GA1UEChMYRGV1dHNjaGUgVGVsZWtvbSBJVCBHbWJIMRYwFAYDVQQD
Ew10LXN5c3RlbXMuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7JJegztf
ZTZ5mf66jO5NFDRPae0v+y4IpVW1d5HHTsWnIfwJ0wGQmpIyVCpXmU2Qq0MN1Rj2
XcQyaIbJzcPYMqOCBAAwggP8MB8GA1UdIwQYMBaAFBwFk7F/qDQwjFLglkCgcqMQ
XeD/MA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwHQYDVR0OBBYEFGlALwyvYwuFWJRib2DE4x3ISoMWMFMGA1UdIARMMEowSAYG
Z4EMAQICMD4wPAYIKwYBBQUHAgEWMGh0dHA6Ly9kb2NzLnNlcnZlcmlkLnRlbGVz
ZWMuZGUvY3BzL3NlcnZlcmlkLmh0bTBeBgNVHR8EVzBVMFOgUaBPhk1odHRwOi8v
Y3JsLnNlcnZlcmlkLnRlbGVzZWMuZGUvcmwvVGVsZWtvbV9TZWN1cml0eV9TZXJ2
ZXJJRF9PVl9DbGFzc18yX0NBLmNybDCBnwYIKwYBBQUHAQEEgZIwgY8wMQYIKwYB
BQUHMAGGJWh0dHA6Ly9vY3NwLnNlcnZlcmlkLnRlbGVzZWMuZGUvb2NzcHIwWgYI
KwYBBQUHMAKGTmh0dHA6Ly9jcnQuc2VydmVyaWQudGVsZXNlYy5kZS9jcnQvVGVs
ZWtvbV9TZWN1cml0eV9TZXJ2ZXJJRF9PVl9DbGFzc18yX0NBLmNydDAMBgNVHRMB
Af8EAjAAMCsGA1UdEQQkMCKCDXQtc3lzdGVtcy5jb22CEXd3dy50LXN5c3RlbXMu
Y29tMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdwDXbX0Q0af1d8LH6V/XAL/5
gskzWmXh0LMBcxfAyMVpdwAAAZrZrttRAAAEAwBIMEYCIQDFT9fvP7jJLz4vpvhG
rtPmLBgdir7+ZERGFt7tsm9ZAAIhAI8fZyeh2eiefW8GsT3MLdmYDbo7QZHRieGS
olDVAhWuAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQAAAGa2a7b
TAAABAMARzBFAiAXFK9annI4JzJeYBrvZDFjBBwci6mt5w8c05oOsYtohAIhAInV
RQzHnDDxw9gBuPWje4zP6T1TZFPdpVYstLJIewXGAHYAlE5Dh/rswe+B8xkkJqgY
ZQHH0184AgE/cmd9VTcuGdgAAAGa2a7cRQAABAMARzBFAiEA8SqAgw4lBGt5jV9b
aGy1wX+DHZFQHPrBKdkSSqzWiasCIHNWBQyXMbd3rbqTyYbl+QwDEFH+8z6rgZyI
sicBkKLVAHYAwjF+V0UZo0XufzjespBB68fCIVoiv3/Vta12mtkOUs0AAAGa2a7c
6QAABAMARzBFAiEAsPiNnOd/3w62Xd9VqjorG0QRc+k4DLmGXRLk+URuHz0CIHI9
guYpd4xqzbOq5r9fUpPJivPFdz1mgQLrtrdaBmoSMA0GCSqGSIb3DQEBCwUAA4IB
gQAiZbBNF3uqAxBsagRfGcw2a6eApB/xxKp4ZJuSaCI6hOUoDsvJMAYWZMOv4/QI
Q0CEyVfbjXmx12S5dGdg3jLKF/40aETz0a00iaBvBF94Boqk5e4CbLfzmUPuXIJK
Vvi7tXRp5eiv02pasqpjqXHKTpZ9Tm5bqVyDSXX6jP0DRvUrGHKmP8z3rMytbYXp
NONWUP1F9OdkqP+AoJBMEzip9vCZ19k7KZTVjUtwIHVHkbzJfN9NYxDvM6+teEwc
f7w0bQpEaqxKfx7itY3OWetuWUc0779ZaL0SVi2Jf+o2F1+7Lf5nUNYKEz6Me4zK
boqzDX4vYUzMEKc2i6cxXPOXGRfmpr2+YXWxk9u7lC4fHsD0dGxUfViBbU7EN67X
X0FzBskJgtGcZ7+OqKAClIrGAaNmoQWUS47IjyeyZt0r3KiHC8ptwKqblrdvMMQm
DRZZC3OVcXJdjwi9XxCi9UdV244WljkOHcdOl1lXOl7kqkzqMCS8do6IXUlWjTaX
hGs=
-----END CERTIFICATE-----

Cipher: ECDHE-ECDSA-AES128-GCM-SHA256 · Checked 2026-09-30T22:14:04+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=DE O=Deutsche Telekom Security GmbH CN=Telekom Security ServerID OV Class 2 CA
Issuer
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Valid from
2022-08-02T09:16:44+00:00
Expires
2027-08-02T23:59:59+00:00
Days remaining
306
Serial (hex)
0E5D298915C40431A4E1C4CA488B8EA3
Signature
RSA-SHA256
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

94:4A:CE:96:1D:B3:16:BE:B6:94:E0:1C:30:2C:46:FE:D4:0D:C0:29:17:29:E7:DA:F5:85:50:C3:CB:55:E7:91
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
1C:05:93:B1:7F:A8:34:30:8C:52:E0:96:40:A0:72:A3:10:5D:E0:FF
authorityKeyIdentifier
BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Client Authentication, TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://grcl2.crl.telesec.de/rl/T-TeleSec_GlobalRoot_Class_2.crl
authorityInfoAccess
OCSP - URI:http://grcl2.ocsp.telesec.de/ocspr CA Issuers - URI:http://grcl2.crt.telesec.de/crt/T-TeleSec_GlobalRoot_Class_2.crt
certificatePolicies
Policy: 2.23.140.1.2.2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Issuer
C=DE O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
Valid from
2008-10-01T10:40:14+00:00
Expires
2033-10-01T23:59:59+00:00
Days remaining
2558
Serial (hex)
01
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

91:E2:F5:78:8D:58:10:EB:A7:BA:58:73:7D:E1:54:8A:8E:CA:CD:01:45:98:BC:0B:14:3E:04:1B:17:05:25:52
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Certificate Sign, CRL Sign
subjectKeyIdentifier
BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →