Certificate Chain Deep Dive

Comprehensive certificate chain validation and CRL revocation analysis.

HTTPS://

Try these examples:

✅ Valid Chain ❌ Revoked Certificate ⚠️ Incomplete Chain

dnsspeedtest.online

10/25/2025, 11:52:11 pm UTC

Certificate Chain Validation

✅ The certificate should be trusted by all major web browsers (all the correct intermediate certificates are installed).

Certificate Details

End Entity

Leaf Certificate
Download PEM
Subject: dnsspeedtest.online
Issuer: WE1
Serial (Decimal): 159912937639640252078208524939093142100
Serial (Hex): 784E1C8BE327BD400D1AE4E5C76CEA54

Valid From: 2025-10-24 11:25:08

Valid Until: 2026-01-22 12:25:07

Signature: ecdsa-with-SHA256

Version: 3

OCSP URLs:
http://o.pki.goog/s/we1/eE4
CRL Revocation Status:

✅ Certificate not found in CRL (not revoked)

CRL size: 347 bytes

CRL URL

http://c.pki.goog/we1/o1fiiaEFTlk.crl

Intermediate CA

Download PEM
Subject: WE1
Issuer: GTS Root R4
Serial (Decimal): 170074200136485300614847617070429275619
Serial (Hex): 7FF31977972C224A76155D13B6D685E3

Valid From: 2023-12-13 09:00:00

Valid Until: 2029-02-20 14:00:00

Signature: ecdsa-with-SHA384

Version: 3

Root CA

Download PEM
Subject: GTS Root R4
Issuer: GlobalSign Root CA
Serial (Decimal): 170001980149335831901244157168837298715
Serial (Hex): 7FE530BF331343BEDD821610493D8A1B

Valid From: 2023-11-15 03:43:21

Valid Until: 2028-01-28 00:00:42

Signature: RSA-SHA256

Version: 3