HOW.IS
?

How is digicert.com?

Looks fine risk 0/100

Registered 30 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 131 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How digicert.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
131 ms · ends at www.digicert.com
HTTPS
32 d
left on a DigiCert Inc certificate
Age
30 years
registered 1996-12-02
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A45.60.131.229
45.60.121.229
MX0 digicert-com.mail.protection.outlook.com
NSpdns196.ultradns.net
ns25.digicertdns.net
ns22.digicertdns.com
pdns196.ultradns.org
ns24.digicertdns.net
ns20.digicertdns.com
pdns196.ultradns.biz
ns23.digicertdns.net
ns21.digicertdns.com
pdns196.ultradns.com
TXTdocusign=999fd605-b079-4d81-b0d8-a95208ae4450
anthropic-domain-verification-3jqen9=N0Wsir4IqKxnVjDr9Fro3i7B9
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mktomail.com include:em2881.digicert.com ~all
_mkwt024uea9zg5c8ywxx98km4xs59oa
pax8validate
fastly-domain-delegation-3t4rfpsjms3gfs7ifvcc-716488-2023-11-22
kUy+EQPWJE5P7A19foqNx806Ir1KXvwbqbedXmbobf/C+X25pgY1YJ1GVX8rj6VdvXnUvqabmtdTO9VF75StGg==
openai-domain-verification=dv-YNK3xcL8AItjkv1ZubDo6TsE
c3cfbc958c404c659f758cdd4dc2ae0e
miro-verification=31e307c1dc4ae6591a1edd5c7dcf58c678b54d32
docker-verification=1608c704-787a-464a-8f5f-4d19c1c3e0aa
cloudhealth=eb379e22-a90f-4097-b814-ca7d330ad0d8
_gitlab-pages-verification-code.digicert.com TXT gitlab-pages-verification-code=76676502ba1febfc1a68d0bf1c3badb1
PDDL96o0kJXfsY1UKWkj8_-WiQ
QuoVadis=8689a090-cbf6-4aff-8fb7-3416494f1f6f
asv=1f1b135281f5d1ef6d125b846798c281
google-site-verification=biaoTy6jC7ljI6uEbBxS7wtBbZAyukDzJTUhJM_hYEg
hbxl3xs6mnfgcvdwpjltfztfqbm0q6j7
google-gws-recovery-domain-verification=48029321
_iu8a5g8unla4ur5rvw7ulwbcfq11mmn
onetrust-domain-verification=f8a2f79b8dab41a492aaaa52e613a679
l685v6cy93xkw8pgppy4ms518l61ql0t
atlassian-domain-verification=/d+HEyZ/KMJ86EO42QuM+xsCy/NYRORirQapa7A521Lw2DAfpubWhSPL218lICJ7
adobe-idp-site-verification=0575680fbf675a4b870e0423b2b288e8f93b19b571ff480a0b235b52428e76f4
tm25jk2w7b1lqkvzg72ns2tnlwkfx4bp
apple-domain-verification=LysAWG6wOID76rWM
pjzx2ldzjbycl42tc85lm8zm05kxc5b9
CAA{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered1996-12-02
expires2027-12-01
last changed2025-04-13
ownerREDACTED FOR PRIVACY
nameserversns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net
pdns196.ultradns.biz
pdns196.ultradns.com
pdns196.ultradns.net
pdns196.ultradns.org
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1996-12-02expires 2027-12-01
HTTPS certificate32 days left
validyes
issuerDigiCert Inc
coverswww.digicert.com, digicert.com
protocolTLSv1.3
issued 2026-10-11expires 2026-11-26
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → digicert.com
Email authenticationexcellent
SPFpass v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mktomail.com include:em2881.digicert.com ~all
DMARCpass policy quarantine
DKIMfound: selector1, selector2, s1, s2, mail

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 170/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
10/25missing: Mail Server Configuration, SOA Record Configuration, IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop45.60.121.229Barracuda45.60.121.229UCEPROTECT Level 145.60.121.229SpamCop45.60.131.229Barracuda45.60.131.229UCEPROTECT Level 145.60.131.229

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=digicert.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=digicert.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on digicert.com. Reference: /llms.txt.

Watch digicert.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days