DI

Digicert.com Domain Trust Report

ACTIVE DigiCert — world's leading SSL/TLS certificate authority
PRISM VERDICT

digicert.com shows moderate health — Security Headers and SSL Certificate and Email Auth need attention. Review the breakdown below.

Last scanned 19m ago · Sep 21, 2026
Run live scan Visit site
OVERALL TRUST SCORE
74 GRADE C
SSL warn
DNS Healthy
EMAIL Strong
SSL GRADE
C
Expires in 35d
DNS HEALTH
100%
10 nameservers
EMAIL AUTH
2/3
SPF · DKIM · DMARC
HEADERS
F
Score: 15/100
DOMAIN EXPIRY
436d
Dec 1, 2027
Critical issues detected — one or more dimensions require immediate attention.

Registration & ownership

WHOIS
Registrar MarkMonitor Inc.
Registered Dec 2, 1996
Updated Apr 13, 2025
Expires Dec 1, 2027 436d
Status client delete prohibit.server delete prohibit.
digicert.com is registered with MarkMonitor Inc., since Dec 2, 1996. Domain registration expires Dec 1, 2027 (436 days). Status: client delete prohibited.
Full WHOIS report

DNS records

DNS
A 45.60.121.22945.60.131.229
MX digicert-com.mail.protection.outlook.com (pri 0)
NS ns24.digicertdns.netns21.digicertdns.comns20.digicertdns.comns22.digicertdns.comns23.digicertdns.netpdns196.ultradns.orgpdns196.ultradns.netpdns196.ultradns.compdns196.ultradns.bizns25.digicertdns.net
TXT google-site-verification=biaoTy6jC7ljI6uEbBxS7wtBbZAyukDzJTUhJM_hYEgQuoVadis=8689a090-cbf6-4aff-8fb7-3416494f1f6fpjzx2ldzjbycl42tc85lm8zm05kxc5b9pax8validatePDDL96o0kJXfsY1UKWkj8_-WiQ +22 more
CAA digicert.com
digicert.com resolves to 45.60.121.229 and 1 more IP. Nameservers: ns24.digicertdns.net, ns21.digicertdns.com (+8). Mail handled by 1 MX record.
Full DNS lookup

Hosting & network

NETWORK
IP address 45.60.121.22945.60.131.229
Nameservers ns24.digicertdns.netns21.digicertdns.comns20.digicertdns.comns22.digicertdns.comns23.digicertdns.netpdns196.ultradns.orgpdns196.ultradns.netpdns196.ultradns.compdns196.ultradns.bizns25.digicertdns.net
Protocol HTTPS HTTP/2
digicert.com is hosted at 45.60.121.229 across 2 IPs. No IPv6 addresses detected. DNS is managed through 10 nameservers (ns24.digicertdns.net).
Full IP analysis

SSL / TLS

SECURITY
Valid · C DigiCert Inc · expires Oct 27, 2026
35 days remaining
TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
Full SSL report

Technology detected

STACK
HTTP/2TLS 1.3HSTSIPv6
Full tech scan

30-day availability

MONITORING
99.50% incidents detected
30d ago today

Email authentication

EMAIL
Full email auth report

Monitoring events

74 total EVENTS
SPF include `mktomail.com` returned no record 6h ago
high email SPF_INCLUDE_BROKEN
expanded
SOA serial regressed 9h ago
high dns DNS_SOA_SERIAL_REGRESS
dns.soa.serial
SOA serial regressed 12h ago
high dns DNS_SOA_SERIAL_REGRESS
dns.soa.serial
+59 more — view live
Run a specific check on digicert.com:
DNS lookup WHOIS SSL check Security headers Email auth Screenshot
DOMAIN LIFECYCLE
Registered Dec 2, 1996 29 years old
Last updated Apr 13, 2025
Expires Dec 1, 2027 436 days remaining
Registrar MarkMonitor Inc.
SSL issued by DigiCert Inc
DOMAIN INTELLIGENCE

What we know about Digicert.com

Digicert.com has been registered for 29 years (since Dec 2, 1996), managed through MarkMonitor Inc., ranked #38 globally by Tranco, categorised as security & ssl. Its current health score is 74/100 (grade C) — generally healthy but with some configuration gaps worth reviewing. As a security-focused platform, its own DNS health, SSL certificate validity, and email authentication configuration are held to a higher standard by the community it serves.

Security Posture Grade C

digicert.com's security posture: SSL certificate needs attention — only 35 days until expiry; security headers are largely missing; no blacklist entries found.

SSL warn
Headers F
SSL expiry 35d
Health score 74/100
Email Authentication Strong

SPF is configured, restricting which servers can send email as this domain. DMARC policy is set to "quarantine" — suspicious emails are quarantined.

SPF Configured
DMARC policy quarantine
Spoofable No
Network Infrastructure

digicert.com resolves to 2 IP addresses (45.60.121.229 and 1 more), DNS is managed through ns24.digicertdns.net and ns21.digicertdns.com (+8 more), email routed through 1 MX record.

Primary IP 45.60.121.229
Nameservers 10
MX records 1
A records 2
DomainScan monitors digicert.com continuously — DNS every hour, SSL & email auth every 6 h, security headers every 12 h, WHOIS every 24 h. Every detected change triggers a severity-classified monitoring event. Refreshed 19m ago
Related tools: WHOIS Lookup DNS Records SSL Checker Security Headers Blacklist Check DMARC Checker Trust Score
WANT LIVE DATA?

This snapshot is from 19m ago. Run it live in one click.

Get a fresh scan of digicert.com across all 25 tools — or scan any domain you own. Free, no card.

Run live scan Scan a different domain
PRODUCT ECOSYSTEM

Do more with DomainScan

Everything you need to secure, monitor, and understand any domain — including digicert.com.

Continuous monitoring for digicert.com

Detect DNS drift, SSL expiry, DMARC changes, WHOIS transfers, and blacklist hits automatically — 24/7 with severity-classified alerts.

Explore the Platform

Embed a live Trust Badge

Show visitors your domain passes 14 safety checks. Live-verified SVG re-scores on every fetch — no stale seals, no maintenance.

Get a Trust Badge

50+ tools, one JSON API

Automate WHOIS, DNS, SSL, blacklist, DMARC, headers, and typosquat checks in your app. Predictable schema, generous free tier.

Read API docs

MCP for AI agents

Give ChatGPT, Claude, Cursor, and any Model Context Protocol client direct access to every DomainScan tool. Zero glue code.

Set up MCP

Ask Prism about digicert.com

Chat with our AI domain analyst. Get plain-English answers on DNS posture, email auth, blacklist state, and reputation risk.

Open Prism AI

How DNS, SSL, DMARC actually work

Free deep-dives on domain security — RDAP, DNSSEC, EPP status codes, phishing detection, SPF alignment, DKIM key rotation.

Visit the Learning Hub