{"domain":"hetzner.de","port":443,"address":"213.133.116.44","resolved_addresses":["213.133.116.44","2a01:4f8:0:1::7:4"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"*.hetzner.de"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"serial":"045EF13A613DE46155753308CC87041E","version":3,"valid_from":"2025-09-12T00:00:00+00:00","valid_to":"2026-10-08T23:59:59+00:00","validity":"expiring_soon","days_remaining":18,"san":"DNS:*.hetzner.de, DNS:hetzner.de","signature":"RSA-SHA256","sha256":"34:8A:53:0C:13:05:21:91:FE:64:27:37:CF:3F:34:07:55:1C:9F:0D:ED:5B:05:B6:5A:77:9C:DC:AA:F9:E4:73","key_type":"RSA","key_bits":4096,"curve":null,"extensions":{"authorityKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","subjectKeyIdentifier":"A9:3D:C5:D6:D4:DE:81:2B:B1:FF:AA:87:B3:2C:D9:26:DF:70:F7:07","subjectAltName":"DNS:*.hetzner.de, DNS:hetzner.de","certificatePolicies":"Policy: 2.23.140.1.2.1\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.thawte.com\nCA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB:\n                B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14\n    Timestamp : Sep 12 07:30:28.339 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:17:98:0A:9C:BE:CD:CA:22:FB:14:EA:D7:\n                D4:EE:C3:C8:D7:E4:99:4D:98:C5:48:AC:68:B9:1A:9D:\n                64:C3:31:9A:02:21:00:F5:F2:6E:B9:3B:E9:51:AB:F5:\n                F1:69:B7:CB:9C:20:99:89:1A:09:5E:2D:17:57:67:C1:\n                8E:E2:D3:FB:F2:C6:89\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:\n                C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD\n    Timestamp : Sep 12 07:30:28.320 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:5F:3F:4F:06:96:38:62:A2:82:33:AD:E8:\n                29:5F:C0:55:26:14:56:96:13:77:F2:30:B1:F5:1E:A2:\n                0D:53:D6:C5:02:20:3F:EA:8F:7E:65:5B:A8:55:85:5F:\n                5B:8C:F4:49:87:C8:E3:4F:5C:5F:AB:CD:E0:E7:6A:E8:\n                C2:F4:E5:36:C9:83\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n                01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n    Timestamp : Sep 12 07:30:28.335 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:CE:7A:B1:3E:19:A4:8C:C5:08:91:4C:\n                61:90:C6:9A:31:73:59:1F:4E:FF:AC:80:32:FE:C3:F3:\n                D1:C9:92:44:F7:02:20:2F:58:33:E6:46:BD:65:75:84:\n                AC:4B:D9:E1:6F:59:50:D2:C7:17:3B:CD:9C:16:11:99:\n                7B:52:53:EA:B6:0B:48"},"pem":"-----BEGIN CERTIFICATE-----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\n7RwEAg59ZopmYdveY1gFpusSU7JqEhUW2IZ+ZOSTgjGjDVZ4fc8bgJjm0Q==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"090EE8C5DE5BFA62D2AE2FF7097C4857","version":3,"valid_from":"2017-11-02T12:24:25+00:00","valid_to":"2027-11-02T12:24:25+00:00","validity":"valid_period","days_remaining":408,"san":"","signature":"RSA-SHA256","sha256":"4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\nTYNYQI+BXG1R1cABlold\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":["The certificate expires within 30 days."],"attempts":[{"address":"213.133.116.44","verified":true,"error":null}],"checked_at":"2026-09-20T09:03:16+00:00","resolver":"Google Public DNS","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}