{"domain":"afrinic.net","port":443,"address":"196.216.3.4","resolved_addresses":["196.216.3.4","2001:42d0:0:250::4"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"*.afrinic.net"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"GeoTrust TLS RSA CA G1"},"serial":"0FEE632FEEB199EF50C952B539F30FE4","version":3,"valid_from":"2026-04-08T00:00:00+00:00","valid_to":"2026-10-23T23:59:59+00:00","validity":"valid_period","days_remaining":33,"san":"DNS:*.afrinic.net, DNS:afrinic.net","signature":"RSA-SHA256","sha256":"C7:25:CE:3D:F4:4F:0C:D4:5B:DF:2C:21:55:16:4A:1E:70:40:30:C2:6B:46:29:AE:0F:4B:A3:0D:75:F1:C1:C4","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"authorityKeyIdentifier":"94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57","subjectKeyIdentifier":"E8:1E:AE:B8:6E:5D:22:34:D5:71:FA:67:1D:4D:B6:28:A5:2A:68:B0","subjectAltName":"DNS:*.afrinic.net, DNS:afrinic.net","certificatePolicies":"Policy: 2.23.140.1.2.1\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.geotrust.com\nCA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:\n                C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD\n    Timestamp : Apr  8 05:56:59.832 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:AA:E2:26:D9:44:E3:B5:F0:70:B7:7F:\n                E3:99:F7:D2:32:17:B7:AB:D3:56:98:8B:7E:81:C6:A6:\n                B2:FD:2B:A2:0C:02:21:00:84:F9:F5:01:78:C3:4A:4C:\n                FF:27:79:5F:74:78:39:14:74:CE:C3:6E:69:F8:D7:63:\n                3F:64:1C:D2:73:3A:C5:94\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n    Timestamp : Apr  8 05:56:59.795 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:99:BF:F6:63:8F:93:35:C8:62:53:E2:\n                29:23:CD:50:47:AF:0A:6F:18:04:4B:6F:7B:EF:28:DE:\n                7F:D9:16:6C:0C:02:20:2A:3E:A1:FA:E6:DA:16:81:E4:\n                3E:C7:DA:3F:22:87:0F:BE:A9:4E:D0:4D:FB:09:96:54:\n                00:D6:EA:E2:23:70:7C\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n                01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n    Timestamp : Apr  8 05:56:59.854 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:DA:F5:D6:CF:E7:4B:8A:13:D3:19:FE:\n                C2:8C:19:0B:5E:33:8B:2C:AE:03:F4:6F:CF:48:F9:EB:\n                6A:14:67:E1:A0:02:20:16:2C:90:A2:E2:B4:57:3D:29:\n                9A:49:FE:A0:34:C2:0A:CF:3C:0B:B0:CE:11:19:7B:AA:\n                C9:21:26:56:A9:7E:C6"},"pem":"-----BEGIN CERTIFICATE-----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\nlS1Gh9GQ4IEvbL0mCsN4vDFsXkpeYxWFo8uNyl7n3mz1eA==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"GeoTrust TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"0D07782A133FC6F9A57296E131FFD179","version":3,"valid_from":"2017-11-02T12:23:37+00:00","valid_to":"2027-11-02T12:23:37+00:00","validity":"valid_period","days_remaining":408,"san":"","signature":"RSA-SHA256","sha256":"C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\n7h4SeM6Y8l/7MBRpPCz6l8Y=\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"033AF1E6A711A9A0BB2864B11D09FAE5","version":3,"valid_from":"2013-08-01T12:00:00+00:00","valid_to":"2038-01-15T12:00:00+00:00","validity":"valid_period","days_remaining":4135,"san":"","signature":"RSA-SHA256","sha256":"CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"basicConstraints":"CA:TRUE","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","subjectKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39"},"pem":"-----BEGIN CERTIFICATE-----\nMIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH\nMjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT\nMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j\nb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG\n9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI\n2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx\n1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ\nq2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz\ntCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ\nvIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP\nBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV\n5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY\n1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4\nNeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG\nFdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91\n8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe\npLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl\nMrY=\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"196.216.3.4","verified":true,"error":null}],"checked_at":"2026-09-20T07:23:49+00:00","resolver":"Google Public DNS","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}