Skip to main content
GDMME
Enquire
GDMME / HTTPS & IDENTITY

Website certificates & identity checks

HTTPS protects the connection
Business identity still needs checking

In the age of AI-enabled scams, encryption is only part of the picture. Know who you are dealing with.

Checks start after a 1-second pause. Enter or the button also works. Certificate and domain registration results appear separately. Only HTTPS is used. URL paths and query parameters are not sent.

Enter a domain to examine connection and identity evidence

Scope

The domain is sent to the GDMME probe and Cloudflare DNS resolver. RDAP queries send the domain to the applicable official registration service. Both successful results are cached for up to 5 minutes. Rate-limit records use an IP hash. Notes and contact details are only sent when you submit an enquiry.

01 / REGISTRATION ≠ OPERATOR

Domain registration data
does not verify the website operator

WHOIS / RDAP · Registration clues

Registration data can be inaccurate, outdated or withheld through privacy/proxy services. Registrants are responsible for accurate information. Contact verification is not organization identity verification.

OV / EV · Organization identity

The CA checks organization identity under applicable requirements, providing information for cross-checking. The party dealing with you still needs confirmation.

Transaction checks · Authority and payment

Check company records, contracts, authority and the payee account. The registrant, hosting provider, certificate organization and actual operator may differ.

Privacy protection, missing names and a newly registered domain do not alone prove fraud. This tool does not bypass privacy redaction.

Entering a domain queries the certificate and an applicable official RDAP source. The results are displayed separately. ·Open official ICANN Lookup ↗

02 / IDENTITY & MANAGEMENT

Identity evidence to cross-check
Certificates to manage throughout their lifecycle

OV

Adds organization identity checks to domain validation, giving customers and procurement teams business information to cross-check.

EV

Uses more extensive rules for legal, physical and operational existence and application authorization, for businesses with corresponding identity-review needs.

Renewal & automation

Domain inventories, expiry alerts, automated renewal and deployment verification help reduce expiry-related interruption.

The value is identity checking and management. OV/EV does not guarantee freedom from fraud, stronger encryption or better SEO/GEO rankings.

03 / BEFORE PAYMENT

Four checks before you pay

  1. 01

    Check the complete domain

    Watch for misspellings, lookalike characters and misleading subdomains. Internationalized domains are displayed in ASCII/Punycode.

  2. 02

    Read the certificate organization

    Distinguish the issuer from the certificate subject organization. Logos, seals, green ticks and AI content are not identity evidence.

  3. 03

    Cross-check business details

    Compare company names, contracting parties and authority. Resolve inconsistencies before providing sensitive information.

  4. 04

    Confirm transaction and payment

    Independently confirm unexpected payee or payment-instruction changes through a previously known contact channel before paying.

Educational sources

Official requirements and guidance. These organizations have not endorsed or rated this tool.

Improve my website certificate

What would you like help with?
Privacy Notice ↗

Not sent. You can copy or download the summary first.