DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

v5.gandi.net · 217.70.185.65:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=v5.gandi.net
Issuer
C=FR O=Gandi CN=Gandi RSA Domain Validation Secure Server CA 3
Valid from
2025-09-16T00:00:00+00:00
Expires
2026-10-03T23:59:59+00:00
Days remaining
12
Serial (hex)
B62502CF83E15DC00A0DE9E31AAE307D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

DNS:v5.gandi.net, DNS:www.v5.gandi.net

SHA-256 fingerprint

F6:39:0D:C8:11:68:1F:46:6A:DE:86:B3:59:B0:06:E1:E6:11:30:9A:F9:90:F8:9F:FC:57:AD:71:AF:59:07:74
Certificate extensions & PEM
authorityKeyIdentifier
81:11:92:DE:66:32:A5:B0:5B:33:3D:65:43:85:FC:D4:04:2D:F1:AE
subjectKeyIdentifier
81:B2:3C:E7:A9:42:DC:DC:EC:EF:57:BA:27:B0:4E:C8:3A:EB:AD:BF
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.26 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
authorityInfoAccess
CA Issuers - URI:http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt OCSP - URI:http://ocsp.sectigo.com
subjectAltName
DNS:v5.gandi.net, DNS:www.v5.gandi.net
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Sep 16 09:45:25.572 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AE:4C:02:CF:0A:1A:2C:45:3B:DD:D6: 40:1D:B3:FF:D5:C0:D4:2C:14:4D:9A:9A:BF:51:E8:D3: 85:04:30:65:67:02:21:00:E2:F0:EB:C7:D9:38:44:17: 44:CE:5F:E2:66:7F:ED:E8:59:67:8B:A5:4E:CA:0A:F2: 52:5F:05:DD:35:49:5C:26 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Sep 16 09:45:25.681 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:47:FF:33:D0:A7:B2:92:2C:EC:E8:AB:F2: 9D:29:DC:9F:67:84:B4:E1:BE:26:8D:42:03:7D:BD:7F: 18:F5:18:A2:02:20:74:49:9D:8A:5B:96:10:3A:46:45: 59:FF:8E:1D:14:06:DA:4C:E3:23:0B:A2:7C:2F:37:43: 34:2F:63:DD:85:C3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 16 09:45:25.467 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:31:73:77:F2:47:D6:97:27:C0:EF:FC:EF: 3A:1A:C9:6F:7F:9C:A7:D3:1A:5F:75:D4:BC:91:5F:C9: F1:7F:2D:58:02:21:00:AE:1C:D2:17:C4:D5:0D:9C:91: 53:EA:50:4E:C9:AC:90:17:B9:17:47:FA:B6:3B:2A:BD: CE:0B:74:06:CB:EA:F0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-21T21:28:05+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=FR O=Gandi CN=Gandi RSA Domain Validation Secure Server CA 3
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2023-08-02T00:00:00+00:00
Expires
2033-08-01T23:59:59+00:00
Days remaining
2506
Serial (hex)
E907E5FF8075224109907D6728CA0010
Signature
RSA-SHA384
Public key
RSA 3072

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

F0:10:4F:F1:72:74:60:8F:1A:18:A1:E1:EA:BF:8E:68:A5:1F:50:0A:87:E2:EF:A2:2E:CB:62:27:63:FE:F4:CF
Certificate extensions & PEM
authorityKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
subjectKeyIdentifier
81:11:92:DE:66:32:A5:B0:5B:33:3D:65:43:85:FC:D4:04:2D:F1:AE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE, pathlen:0
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
certificatePolicies
Policy: 1.3.6.1.4.1.6449.1.2.2.26 Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
authorityInfoAccess
CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Issuer
C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
Valid from
2010-02-01T00:00:00+00:00
Expires
2038-01-18T23:59:59+00:00
Days remaining
4137
Serial (hex)
01FD6D30FCA3CA51A81BBC640E35032D
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
Certificate extensions & PEM
subjectKeyIdentifier
53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →