SSL/TLS Certificate Lookup

Check a domain's SSL/TLS certificate — who issued it, when it expires, and whether the chain is trusted

cr-arch.de

SSL/TLS Certificate

Whois RDAP DNS Records Certificate Uptime Diagnostics History Hide Contact Info

SSL/TLS Certificate for cr-arch.de

Hostname mismatch

Issued by (CA): Sectigo Limited
Subject: *.webspezi.com
Valid from: Oct 1, 2025
Valid until: Nov 1, 2026 (70 days remaining)
Public key: RSA 4096-bit
Serial: AA4DED030B13FC0B89A132BF721B6B86
SHA-256 fingerprint: EA:37:3D:24:50:8D:DB:6F:16:97:81:6F:6E:EB:EB:F4:74:0E:FD:9A:74:C1:DD:9E:F5:D0:89:38:E0:E6:A8:80
Chain: Sectigo Public Server Authentication CA OV R36 → Sectigo Public Server Authentication Root R46

Subject Alternative Names (2)

*.webspezi.com, webspezi.com

Certificate Authority Authorization (CAA)

The serving CA (Sectigo Limited) is not among the authorities this domain's CAA records authorize (digicert.com, letsencrypt.org). This can indicate a misconfiguration or an unexpected issuance.

Never get surprised by cr-arch.de's certificate expiring

This is today's certificate. Turn on monitoring and we'll watch cr-arch.de continuously, notifying you the moment anything moves across all three signals:

Uptime

We visit the site from multiple regions worldwide and email you within minutes if it goes down, with a per-region breakdown so a real outage stands out from a regional blip.

DNS changes

We watch NS, MX, CAA, DNSSEC, CNAME and A/AAAA records, and identify the host, network, and ASN behind them, so a real migration or hijack stands out from routine noise.

TLS certificate

We warn you 30, 14, 7, and 1 days before it expires, and flag it if the issuing authority changes or the certificate is unexpectedly replaced.

Monitor this certificate free

Free for your first domain: uptime, DNS, and certificate together. No credit card.