SSL/TLS Certificate Lookup

Check a domain's SSL/TLS certificate — who issued it, when it expires, and whether the chain is trusted

a3fc6d978a5f12cb8.awsglobalaccelerator.com

SSL/TLS Certificate

SSL/TLS Certificate for a3fc6d978a5f12cb8.awsglobalaccelerator.com

Hostname mismatch
Issued by (CA)
Amazon
Subject
origin.byu.brigham-young.production.church.brightspot.cloud
Valid from
Jul 28, 2026
Valid until
Feb 10, 2027 (89 days remaining)
Public key
RSA 2048-bit
Serial
091A15CC754D5CB85A75FDA097F333F8
SHA-256 fingerprint
4D:77:D6:F1:FC:CA:7B:F4:C3:40:7A:5A:53:1C:AA:55:54:75:66:1E:A7:83:D3:A4:6A:AB:CB:37:CA:72:54:BC
Chain
Amazon RSA 2048 M04 → Amazon Root CA 1 → Starfield Services Root Certificate Authority - G2
Subject Alternative Names (14)
*.byu.brigham-young.production.church.brightspot.cloud, *.byuh.edu, *.cms.byu.brigham-young.production.church.brightspot.cloud, *.origin.byu.brigham-young.production.church.brightspot.cloud, byu.brigham-young.production.church.brightspot.cloud, byuh.edu, cms.byu.brigham-young.production.church.brightspot.cloud, live.byuh.edu, mft-prn.net, nativebutforeign.org, origin.byu.brigham-young.production.church.brightspot.cloud, static.byu.brigham-young.production.church.brightspot.cloud, verify.cms.byu.brigham-young.production.church.brightspot.cloud, verify.origin.byu.brigham-young.production.church.brightspot.cloud

Certificate Authority Authorization (CAA)

No CAA policy is published for this domain — any certificate authority may issue for it.

Never get surprised by a3fc6d978a5f12cb8.awsglobalaccelerator.com's certificate expiring

This is today's certificate. Turn on monitoring and we'll watch a3fc6d978a5f12cb8.awsglobalaccelerator.com continuously, notifying you the moment anything moves across all three signals:

Certificate monitor showing the issuer, expiry date, chain status, fingerprint, covered names, and a history of a rotation and an expiry warning

Uptime

We visit the site from multiple regions worldwide and email you within minutes if it goes down, with a per-region breakdown so a real outage stands out from a regional blip.

DNS changes

We watch NS, MX, CAA, CNAME, TXT and A/AAAA records, and identify the host, network, and ASN behind them, so a real migration or hijack stands out from routine noise.

TLS certificate

We warn you 30, 14, 7, and 1 days before it expires, and flag it if the issuing authority changes or the certificate is unexpectedly replaced.

Monitor this certificate free

Free for your first domain: uptime, DNS, and certificate together. No credit card.