Certificate Chain Deep Dive

Comprehensive certificate chain validation and CRL revocation analysis.

HTTPS://

Try these examples:

✅ Valid Chain ❌ Revoked Certificate ⚠️ Incomplete Chain

dnsspeedtest.online

9/10/2025, 2:24:26 am UTC

Certificate Chain Validation

✅ The certificate should be trusted by all major web browsers (all the correct intermediate certificates are installed).

Certificate Details

End Entity

Leaf Certificate
Download PEM
Subject: dnsspeedtest.online
Issuer: WE1
Serial (Decimal): 165149101091258076108084486384299549843
Serial (Hex): 7C3E8F5621F0BF230DCA4F23EC382493

Valid From: 2025-08-26 09:21:57

Valid Until: 2025-11-24 10:21:56

Signature: ecdsa-with-SHA256

Version: 3

OCSP URLs:
http://o.pki.goog/s/we1/fD4
CRL Revocation Status:

✅ Certificate not found in CRL (not revoked)

CRL size: 384 bytes

CRL URL

http://c.pki.goog/we1/khE4z_g7LG8.crl

Intermediate CA

Download PEM
Subject: WE1
Issuer: GTS Root R4
Serial (Decimal): 170074200136485300614847617070429275619
Serial (Hex): 7FF31977972C224A76155D13B6D685E3

Valid From: 2023-12-13 09:00:00

Valid Until: 2029-02-20 14:00:00

Signature: ecdsa-with-SHA384

Version: 3

Root CA

Download PEM
Subject: GTS Root R4
Issuer: GlobalSign Root CA
Serial (Decimal): 170001980149335831901244157168837298715
Serial (Hex): 7FE530BF331343BEDD821610493D8A1B

Valid From: 2023-11-15 03:43:21

Valid Until: 2028-01-28 00:00:42

Signature: RSA-SHA256

Version: 3