DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

uva.nl · 76.223.53.36:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=NL ST=North-Holland O=Universiteit van Amsterdam CN=www.uva.nl
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV E36
Valid from
2026-07-21T00:00:00+00:00
Expires
2027-02-04T23:59:59+00:00
Days remaining
113
Serial (hex)
436AD669AFB3630D66591D4E712C696C
Signature
ecdsa-with-SHA256
Public key
EC 384 secp384r1

Subject alternative names (SAN)

DNS:www.uva.nl, DNS:alb-prd.cms.uva.nl, DNS:extranet.uva.nl, DNS:fdr.uva.nl, DNS:feb.uva.nl, DNS:fgw.uva.nl, DNS:fmg.uva.nl, DNS:ga-prd.cms.uva.nl, DNS:hum.uva.nl, DNS:static.uva.nl, DNS:uva.nl, DNS:www.extranet.uva.nl, DNS:www.fdr.uva.nl, DNS:www.feb.uva.nl, DNS:www.fgw.uva.nl, DNS:www.fmg.uva.nl, DNS:www.hum.uva.nl, DNS:zoek.uva.nl

SHA-256 fingerprint

FC:40:FE:50:68:E3:A6:87:86:A8:8C:B9:FC:AC:8A:8A:F2:8C:2C:CD:5E:5A:96:A3:F2:C3:64:79:A1:0A:1D:33
Certificate extensions & PEM
authorityKeyIdentifier
4C:38:7A:25:34:6B:FD:F9:8F:1A:60:1C:92:71:AA:67:F9:82:37:EB
subjectKeyIdentifier
BB:72:A8:4A:05:CB:E1:B7:2B:95:79:2B:57:C9:C6:80:FA:B2:41:E9
keyUsage
Digital Signature
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVE36.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVE36.crt OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Jul 21 08:48:56.039 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:74:4E:46:83:80:66:69:CC:B1:E3:04:CF: 2F:B5:F5:64:9C:69:D0:C3:C7:94:63:68:99:A6:A7:FB: CF:BB:48:07:02:21:00:8E:10:DA:38:87:83:58:94:27: D9:0A:77:EB:3B:D5:BC:35:F2:4D:B3:25:6F:7B:46:6A: EA:CB:47:7B:2F:A3:EC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Jul 21 08:48:56.255 2026 GMT Extensions: 00:00:05:00:06:9B:36:2E Signature : ecdsa-with-SHA256 30:45:02:21:00:A8:54:72:85:7E:1E:26:9E:C3:02:45: 91:DA:95:77:B9:43:F7:92:A1:95:04:45:F1:EC:83:55: D6:CF:3C:73:63:02:20:1D:8D:6B:AF:FB:74:6B:83:88: 1E:C9:5B:6E:40:A3:8B:F7:A4:9F:C8:B4:1B:24:1E:6F: FA:0C:BF:E7:50:75:41 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Jul 21 08:48:56.631 2026 GMT Extensions: 00:00:05:00:00:50:7F:0C Signature : ecdsa-with-SHA256 30:46:02:21:00:C0:FA:A8:69:96:B4:22:2C:98:24:FA: A4:21:71:FF:06:C2:D3:48:E1:63:AB:A2:DB:51:EE:AB: C8:B9:5D:9F:1F:02:21:00:B0:F9:99:ED:29:BA:BF:76: 16:67:44:D8:CE:36:83:F1:14:3C:D0:5F:F2:E1:FA:BE: 76:A6:98:49:E6:3F:03:A1
subjectAltName
DNS:www.uva.nl, DNS:alb-prd.cms.uva.nl, DNS:extranet.uva.nl, DNS:fdr.uva.nl, DNS:feb.uva.nl, DNS:fgw.uva.nl, DNS:fmg.uva.nl, DNS:ga-prd.cms.uva.nl, DNS:hum.uva.nl, DNS:static.uva.nl, DNS:uva.nl, DNS:www.extranet.uva.nl, DNS:www.fdr.uva.nl, DNS:www.feb.uva.nl, DNS:www.fgw.uva.nl, DNS:www.fmg.uva.nl, DNS:www.hum.uva.nl, DNS:zoek.uva.nl
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-14T12:51:54+00:00

Server-presented chain · 3 additional certificates

Chain certificate 1

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV E36
Issuer
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Valid from
2021-03-22T00:00:00+00:00
Expires
2036-03-21T23:59:59+00:00
Days remaining
3446
Serial (hex)
12B0648BE8E2B91074216C1DAE9C5795
Signature
ecdsa-with-SHA384
Public key
EC 256 prime256v1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

41:02:BB:08:B7:EA:19:E5:67:EB:67:10:38:4C:54:0A:FD:AD:99:3A:F0:D9:DF:BF:91:CA:62:73:75:5B:8B:A0
Certificate extensions & PEM
authorityKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
subjectKeyIdentifier
4C:38:7A:25:34:6B:FD:F9:8F:1A:60:1C:92:71:AA:67:F9:82:37:EB
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
crlDistributionPoints
Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootE46.crl
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootE46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root E46
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2021-03-22T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4114
Serial (hex)
1A9EAFEC6DE8E19B5C193141B68D90DD
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

EA:6B:89:ED:69:07:A2:09:FF:91:88:67:6F:B1:64:E7:AC:ED:89:4B:89:96:DF:BE:5C:E5:BB:CC:22:DE:4D:DD
Certificate extensions & PEM
authorityKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
subjectKeyIdentifier
D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: X509v3 Any Policy
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl
authorityInfoAccess
OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 3

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust ECC Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4114
Serial (hex)
5C8B99C55A94C5D27156DECD8980CC26
Signature
ecdsa-with-SHA384
Public key
EC 384 secp384r1

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

4F:F4:60:D5:4B:9C:86:DA:BF:BC:FC:57:12:E0:40:0D:2B:ED:3F:BC:4D:4F:BD:AA:86:E0:6A:DC:D2:A9:AD:7A
Certificate extensions & PEM
subjectKeyIdentifier
3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →