DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

utrecht.nl · 94.228.136.150:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL ST=Utrecht L=Utrecht O=Gemeente Utrecht CN=www.utrecht.nl
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Valid from
2025-10-20T15:26:01+00:00
Expires
2026-11-21T15:26:00+00:00
Days remaining
20
Serial (hex)
0AD5E077EB053AD5524CE80A
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:www.utrecht.nl, DNS:utrecht.nl

SHA-256 fingerprint

59:98:99:72:2B:2A:4A:2C:75:21:4A:91:22:22:21:58:FE:F8:40:32:57:5D:B4:85:79:AD:E2:34:DA:08:EB:F0
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
certificatePolicies
Policy: 1.3.6.1.4.1.4146.1.20 CPS: https://www.globalsign.com/repository/ Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsrsaovsslca2018.crl
subjectAltName
DNS:www.utrecht.nl, DNS:utrecht.nl
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
subjectKeyIdentifier
2A:61:83:1A:CE:33:22:F1:59:2C:B1:48:6D:30:B4:EE:E0:73:F4:7E
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Oct 20 15:26:04.959 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:89:EA:46:A6:0F:EA:65:94:63:A8:30: 4B:B4:CC:03:12:D2:5B:88:72:CA:D9:94:0B:27:B2:6C: B7:62:5C:C3:6D:02:20:71:8A:02:A8:43:30:42:F3:3D: 4C:2F:C3:52:17:3F:43:07:05:9B:21:5F:B0:78:D2:CF: 37:AE:3A:84:A4:13:36 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Oct 20 15:26:04.526 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:22:EF:38:F3:6E:8F:63:95:D2:A8:39:38: B5:8F:F5:AC:23:E4:78:7A:54:F3:B0:C4:38:9A:89:D1: 25:D9:71:15:02:20:30:1A:9B:70:FF:79:AE:56:88:ED: 7B:66:29:84:05:14:06:50:85:5E:54:34:E0:15:F7:5B: 29:D1:A4:1E:47:C9 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Oct 20 15:26:04.912 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:1B:DF:17:DC:3D:54:2B:E6:87:00:ED:CD: 89:D5:07:A2:E1:BA:51:7A:83:5E:05:40:01:4E:91:C1: 55:4D:AD:DD:02:20:01:B7:CF:22:46:A2:CB:CE:12:82: A7:2D:EB:CA:AC:92:A5:3F:F4:79:55:7B:18:DA:F6:C5: 50:CA:EB:B7:F1:CF
-----BEGIN CERTIFICATE-----
MIIHjzCCBnegAwIBAgIMCtXgd+sFOtVSTOgKMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNTEwMjAxNTI2MDFaFw0y
NjExMjExNTI2MDBaMGUxCzAJBgNVBAYTAk5MMRAwDgYDVQQIEwdVdHJlY2h0MRAw
DgYDVQQHEwdVdHJlY2h0MRkwFwYDVQQKExBHZW1lZW50ZSBVdHJlY2h0MRcwFQYD
VQQDEw53d3cudXRyZWNodC5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBALwjoQtpZfjMIpz5VLzwfeqqGiyFyMRzgzIijwHsve1fWdLMxEa68dBD0Jqu
iFOT/y8nonQ8A1GFHP1kU0KaBkCc52BvApj3hkO5IUhVpQ4wTSMqSgrGm1Ni4Go2
RcGeOm9t5QIM5xJckyUDrS2yEeSCPZA3FQtYxW3dIaPrlZ1Sh3A94UaYsuX1NwZF
s1ngolxgvK8MfCIout9DH3KDnhFBZwHtdVi7H8H2R72CBMOQmhyeCbdZTV9khT1+
JGfFFoPNdfmJd0d5yp8RrcGXMUKgD8y2I6cQSxZfNVt/ZzBHxR/zDkw1yRLRPDld
5g/mJ6bt4FIpPpljpuM3EB64oWSyRxxhyhEI4atQwl7qeqOlLY9j+agTTKJgDghi
UetfZXuPVs1LoOpUmNSs2B6NwnX3HyLqTnGMfynmi7CtJsqbq/s/i0eq+Ug1s8rC
fSp4mWoUWljcaB/u2cH64+iQH8/in+1Xw9M7DZLudbzYTz/GN+LZ25jHiI/R/GOp
mHW/TzCJESYmhq4xMv29uzjtG38u65T1amiWlgbITgupZcwzwzggFw6EirJW/VvR
IfVyYysvORHcTGxLbgEB3Qfe7gVlMdyuO5EI1loFv73gyGadSobLLD/AK9fPsn8Z
Av72v8rdfEbpU0sF4BTgqcTpCpg9keg0aaoHJ//9BRjFUgVnAgMBAAGjggNSMIID
TjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBjgYIKwYBBQUHAQEEgYEw
fzBEBggrBgEFBQcwAoY4aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNl
cnQvZ3Nyc2FvdnNzbGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3Nw
Lmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkr
BgEEAaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6
Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5jcmwwJQYDVR0R
BB4wHIIOd3d3LnV0cmVjaHQubmyCCnV0cmVjaHQubmwwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPr
MB0GA1UdDgQWBBQqYYMazjMi8VkssUhtMLTu4HP0fjCCAXwGCisGAQQB1nkCBAIE
ggFsBIIBaAFmAHYAlE5Dh/rswe+B8xkkJqgYZQHH0184AgE/cmd9VTcuGdgAAAGa
AjpGnwAABAMARzBFAiEAiepGpg/qZZRjqDBLtMwDEtJbiHLK2ZQLJ7Jst2Jcw20C
IHGKAqhDMELzPUwvw1IXP0MHBZshX7B40s83rjqEpBM2AHUAyzj3FYl8hKFEX1vB
3fvJbvKaWc1HCmkFhbDLFMMUWOcAAAGaAjpE7gAABAMARjBEAiAi7zjzbo9jldKo
OTi1j/WsI+R4elTzsMQ4monRJdlxFQIgMBqbcP95rlaI7XtmKYQFFAZQhV5UNOAV
91sp0aQeR8kAdQDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1rXaa2Q5SzQAAAZoC
OkZwAAAEAwBGMEQCIBvfF9w9VCvmhwDtzYnVB6LhulF6g14FQAFOkcFVTa3dAiAB
t88iRqLLzhKCpy3ryqySpT/0eVV7GNr2xVDK67fxzzANBgkqhkiG9w0BAQsFAAOC
AQEAg7Vmk+y4GOuwhyJYqPTYgoPsbsT0Tu6dU6kkswosSANIe/wYItj9UZU8u8dL
ZHV+58VJxoygATZjRRhwzYOBidDMsu3aLYGoWe7Ifcf4EelSnVYJik0dB/qf/Mfa
pw/xOF3MIxFvNwcLebr/EzfKaD6QrsP9+Eqc+/DsSBeZgZo4kivT4DDLm+xZ+wQL
8G7eN+hlQS12o8OFGudWOgGcJ76ZLzWiQWMcz1pqG2ScD/GcpOvFSJBA1CX7t5wA
DdWV43E8kePjnhzViBSFKMsg24sUW3AFkbRKg94JUopzeVYgDY7Xrsvyo/ylwMNZ
PEImbkjcArbJTsX1dDzPeyGHdA==
-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-01T05:53:57+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign RSA OV SSL CA 2018
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2018-11-21T00:00:00+00:00
Expires
2028-11-21T00:00:00+00:00
Days remaining
750
Serial (hex)
01EE5F221DFC623BD4333A8557
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

B6:76:FF:A3:17:9E:88:12:09:3A:1B:5E:AF:EE:87:6A:E7:A6:AA:F2:31:07:8D:AD:1B:FB:21:CD:28:93:76:4A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2009-03-18T10:00:00+00:00
Expires
2029-03-18T10:00:00+00:00
Days remaining
868
Serial (hex)
04000000000121585308A2
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

CB:B5:22:D7:B7:F1:27:AD:6A:01:13:86:5B:DF:1C:D4:10:2E:7D:07:59:AF:63:5A:7C:F4:72:0D:C9:63:C5:3B
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →