{"domain":"hetzner.com","port":443,"address":"213.133.116.44","resolved_addresses":["213.133.116.44","2a01:4f8:0:1::7:4"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"*.hetzner.com"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"serial":"0E00CFA1ECC6842E0032D63F955948A9","version":3,"valid_from":"2026-07-15T00:00:00+00:00","valid_to":"2027-01-29T23:59:59+00:00","validity":"valid_period","days_remaining":131,"san":"DNS:*.hetzner.com, DNS:hetzner.com","signature":"RSA-SHA256","sha256":"68:40:F6:BB:29:AD:8B:EB:2C:9E:28:08:CF:F0:1F:97:28:A3:AB:CC:E3:00:2F:8B:DB:62:C2:59:CB:48:1C:08","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"authorityKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","subjectKeyIdentifier":"AE:00:CD:CC:1A:7D:C7:B4:56:87:04:06:3D:30:73:8E:D6:81:46:3B","subjectAltName":"DNS:*.hetzner.com, DNS:hetzner.com","certificatePolicies":"Policy: 2.23.140.1.2.1\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Agreement","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.thawte.com\nCA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Jul 15 08:23:32.817 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:84:A7:A6:A1:15:17:62:BA:44:00:8B:\n                68:F1:4E:C7:EA:31:EF:22:40:9C:6A:DC:05:13:AF:35:\n                68:F0:3F:DD:AF:02:21:00:C6:FD:AD:EE:91:98:68:BD:\n                E5:44:9F:47:1D:02:C5:47:9C:2D:AB:FF:ED:B6:38:90:\n                DA:9D:09:65:57:42:D9:55\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF:\n                EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02\n    Timestamp : Jul 15 08:23:32.829 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:7E:35:22:67:A9:05:4F:50:09:44:F0:FE:\n                14:CF:96:0C:71:88:C1:7A:AB:14:88:51:94:FD:C5:7D:\n                57:54:0A:3A:02:21:00:AC:32:CC:12:7D:78:C2:34:51:\n                EF:FD:74:78:05:80:52:7B:A4:2C:95:16:B4:E8:DD:60:\n                D9:6F:90:CC:E5:36:C2\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Jul 15 08:23:32.991 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:C1:66:E6:BD:1A:9C:8C:3B:2F:02:61:\n                97:5B:18:76:55:18:7C:FF:8A:42:F6:32:06:52:F4:DF:\n                DC:76:EE:88:D7:02:21:00:89:6A:31:96:DE:88:84:40:\n                DE:8D:22:03:A8:59:A0:2D:E9:7F:4A:54:E5:19:35:7C:\n                10:FA:DE:45:EB:F1:EA:89"},"pem":"-----BEGIN CERTIFICATE-----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\nRk4I4NxOdYpG7FEiGPJh+ncaX2hTYw==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"090EE8C5DE5BFA62D2AE2FF7097C4857","version":3,"valid_from":"2017-11-02T12:24:25+00:00","valid_to":"2027-11-02T12:24:25+00:00","validity":"valid_period","days_remaining":408,"san":"","signature":"RSA-SHA256","sha256":"4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\nTYNYQI+BXG1R1cABlold\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"213.133.116.44","verified":true,"error":null}],"checked_at":"2026-09-20T07:22:36+00:00","resolver":"Google Public DNS","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}