{"domain":"squarespace.com","port":443,"address":"198.49.23.181","resolved_addresses":["198.49.23.181","198.185.159.180","198.185.159.181","198.49.23.180"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"US","ST":"New York","L":"New York","O":"Squarespace, Inc.","CN":"*.squarespace.com"},"issuer":{"C":"US","O":"DigiCert Inc","CN":"DigiCert Global G2 TLS RSA SHA256 2020 CA1"},"serial":"0EF444771207F0A7402C48A640F83128","version":3,"valid_from":"2026-02-10T00:00:00+00:00","valid_to":"2027-03-03T23:59:59+00:00","validity":"valid_period","days_remaining":164,"san":"DNS:*.squarespace.com, DNS:squarespace.com, DNS:*.campaign-preferences.com, DNS:campaign-preferences.com, DNS:*.sqsp.net, DNS:sqsp.net, DNS:*.sqspcdn.com, DNS:static1.1.sqspcdn.com, DNS:static2.1.sqspcdn.com, DNS:static1.2.sqspcdn.com, DNS:cdn1.1.sqspcdn.com, DNS:sqspcdn.com, DNS:*.engage.squarespace-mail.com, DNS:engage.squarespace-mail.com","signature":"RSA-SHA256","sha256":"0E:C2:D4:8A:A8:10:93:72:93:13:ED:7F:AE:ED:D5:4F:80:46:1C:07:6C:86:11:FC:8D:21:1C:86:72:55:E7:CE","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"authorityKeyIdentifier":"74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17","subjectKeyIdentifier":"DD:87:14:A1:2D:B2:D1:B6:84:25:E2:82:11:00:2F:B0:9B:82:F5:32","subjectAltName":"DNS:*.squarespace.com, DNS:squarespace.com, DNS:*.campaign-preferences.com, DNS:campaign-preferences.com, DNS:*.sqsp.net, DNS:sqsp.net, DNS:*.sqspcdn.com, DNS:static1.1.sqspcdn.com, DNS:static2.1.sqspcdn.com, DNS:static1.2.sqspcdn.com, DNS:cdn1.1.sqspcdn.com, DNS:sqspcdn.com, DNS:*.engage.squarespace-mail.com, DNS:engage.squarespace-mail.com","certificatePolicies":"Policy: 2.23.140.1.2.2\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl\n\nFull Name:\n  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl\n","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Feb 10 22:22:00.413 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:E2:36:04:B7:37:2E:2A:AB:45:5C:B1:\n                39:BF:9F:F0:E7:A6:99:AE:BB:45:CC:BD:CA:83:C4:6E:\n                A5:EB:DF:61:AB:02:20:26:15:64:C3:68:1D:FE:5C:71:\n                F7:CF:92:4E:43:21:AE:E8:1B:94:20:BD:D8:B1:3E:63:\n                E9:59:09:90:D9:31:F8\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Feb 10 22:22:00.329 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:AE:7F:ED:5A:65:17:D7:4B:50:E9:6E:\n                00:9F:CB:A5:46:F5:B2:B8:22:4F:24:DF:A1:21:C7:0E:\n                3C:0A:CB:9E:4E:02:21:00:B0:1E:04:FE:54:ED:EC:C1:\n                21:28:F9:B4:58:D0:46:DC:14:22:14:15:69:79:F5:09:\n                AA:41:51:6F:5F:90:11:C1\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99:\n                EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9\n    Timestamp : Feb 10 22:22:00.469 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:62:92:B8:2E:29:41:87:71:FF:3C:87:2B:\n                D5:50:2A:48:58:4D:9E:49:FC:E4:C9:0A:BF:CA:84:6C:\n                36:D2:59:AB:02:20:33:9A:3A:02:8D:FB:89:33:7F:66:\n                79:18:8A:B7:EE:62:92:12:25:49:99:B7:B1:D9:C4:28:\n                56:73:49:D0:69:15"},"pem":"-----BEGIN CERTIFICATE-----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\nu5/55fD+kTnmdYs=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","CN":"DigiCert Global G2 TLS RSA SHA256 2020 CA1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"0CF5BD062B5602F47AB8502C23CCF066","version":3,"valid_from":"2021-03-30T00:00:00+00:00","valid_to":"2031-03-29T23:59:59+00:00","validity":"valid_period","days_remaining":1651,"san":"","signature":"RSA-SHA256","sha256":"C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"basicConstraints":"CA:TRUE, pathlen:0","subjectKeyIdentifier":"74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: 2.16.840.1.114412.2.1\nPolicy: 2.23.140.1.1\nPolicy: 2.23.140.1.2.1\nPolicy: 2.23.140.1.2.2\nPolicy: 2.23.140.1.2.3"},"pem":"-----BEGIN CERTIFICATE-----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\nJCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA==\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"198.49.23.181","verified":true,"error":null}],"checked_at":"2026-09-20T08:08:22+00:00","resolver":"Google Public DNS","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}