TLS / SSL certificate
ST
store.steampowered.com TLS certificate
store.steampowered.com
port 443
23.202.153.171
What this means
Browsers will accept this certificate. Plan a renewal before the expiry date below — most CAs auto-renew at 30 days remaining.
Certificate details
- Subject CN
- store.steampowered.com
- Issuer
- DigiCert Inc / DigiCert Global G3 TLS ECC SHA384 2020 CA1
- Valid from
- Aug 15, 2025, 12:00 AM (253d ago)
- Valid to
- Aug 17, 2026, 11:59 PM (1s ago)
- Days remaining
- 114
- Key
- EC prime256v1
- Signature
- ECDSA-PRIME256V1
- Hostname match
- yes
- SHA-256 fingerprint
- A9:B7:9D:E9:47:02:F1:AC:FC:2A:C1:89:46:F8:86:23:A0:AF:A5:E2:44:1E:3C:43:B1:EB:89:5E:64:E3:10:86
Subject Alternative Names (2)
store.steampowered.comcheckout.steampowered.com
What to try next
Full HTTP probe
Run /check/store.steampowered.com to see live HTTP status, response time, and 24h history alongside this cert.
Renewal reminder
Set a 30-day-before-expiry calendar reminder. Most outages caused by expired certs come from missed renewals.
Check related
Compare with related services or apex/subdomain combinations to spot inconsistencies.
Methodology
- Probe
- We open a TLS handshake to port 443 with the supplied hostname as the SNI, read the peer certificate via getPeerCertificate(true), and validate the hostname against subjectAlternativeName via tls.checkServerIdentity.
- Counts as DOWN
- The TLS handshake fails entirely (TCP refused, handshake timeout, or rejected ClientHello) — we couldn't read a certificate at all.
- Counts as DEGRADED
- Reserved for soon-to-expire certificates and warning-only validation issues like a self-signed cert. Browsers may still warn even when our check labels the cert valid.
- Detail
- All certificate details come from getPeerCertificate(true) on the established socket. We do not enumerate cipher suites, test downgrade attacks, or scan for protocol-level weaknesses; this is read-only certificate inspection.
- Cadence
- Every 5 minutes, in parallel across 4 monitoring regions (US East Virginia, US West Oregon, Europe London, Asia Singapore).
- Rate-limited targets
- If a host returns 429 or consistently drops connections from our IPs, we cap retries at 3 and report the last observed status — we do not flood the target to confirm the outage.
- Data source
- Direct probes from our monitoring infrastructure. We do not aggregate crowd reports, Twitter mentions, or DownDetector signals — every result on this page is a live network request.