Certificate Chain Deep Dive

Comprehensive certificate chain validation and CRL revocation analysis.

HTTPS://

Try these examples:

✅ Valid Chain ❌ Revoked Certificate ⚠️ Incomplete Chain

google.com

8/5/2025, 3:42:57 pm UTC

Certificate Chain Validation

✅ The certificate should be trusted by all major web browsers (all the correct intermediate certificates are installed).

Certificate Details

End Entity

Leaf Certificate
Download PEM
Subject: *.google.com
Issuer: WE2
Serial (Decimal): 0xCF6660720CEB3DF3124E3618E3219684
Serial (Hex): CF6660720CEB3DF3124E3618E3219684

Valid From: 2025-07-07 08:34:14

Valid Until: 2025-09-29 08:34:13

Signature: ecdsa-with-SHA256

Version: 3

OCSP URLs:
http://o.pki.goog/we2
CRL Revocation Status:

✅ Certificate not found in CRL (not revoked)

CRL size: 5382 bytes

CRL URL

http://c.pki.goog/we2/Gt0Gl6QoGAU.crl

Intermediate CA

Download PEM
Subject: WE2
Issuer: GTS Root R4
Serial (Decimal): 170074604807150777415902075947543458528
Serial (Hex): 7FF32D6B409D15D5965B05873A7C72E0

Valid From: 2023-12-13 09:00:00

Valid Until: 2029-02-20 14:00:00

Signature: ecdsa-with-SHA384

Version: 3

Root CA

Download PEM
Subject: GTS Root R4
Issuer: GlobalSign Root CA
Serial (Decimal): 170001980149335831901244157168837298715
Serial (Hex): 7FE530BF331343BEDD821610493D8A1B

Valid From: 2023-11-15 03:43:21

Valid Until: 2028-01-28 00:00:42

Signature: RSA-SHA256

Version: 3