SSL certificate
TLSv1.3dfn.de · 37.208.106.105:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=DE ST=Berlin L=Berlin O=Verein z. Foerderung eines Deutschen Forschungsnetzes DFN-Verein CN=dfn.de
- Issuer
- C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
- Valid from
- 2026-09-01T14:55:28+00:00
- Expires
- 2027-03-19T14:55:27+00:00
- Days remaining
- 180
- Serial (hex)
- 3DA557085A37CCCA63F8E4DD212579E1
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:dfn.de, DNS:www.dfn.de
SHA-256 fingerprint
A6:8F:87:37:41:AA:56:FB:41:F6:13:7A:75:50:4C:EC:2B:BF:1B:A4:EF:F7:56:D2:3B:BF:B5:3B:97:66:EC:A2
Certificate extensions & PEM
- basicConstraints
- CA:FALSE
- authorityKeyIdentifier
- 86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
- authorityInfoAccess
- CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer
- subjectAltName
- DNS:dfn.de, DNS:www.dfn.de
- certificatePolicies
- Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
- subjectKeyIdentifier
- FF:99:B2:2A:C1:AA:D4:AD:DF:A8:83:F9:13:08:A7:22:6B:F4:46:EC
- keyUsage
- Digital Signature, Key Encipherment
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Sep 1 15:05:29.865 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:47:14:73:5F:47:8D:F3:A7:0A:6C:88:CB: D5:1A:5E:0D:6F:B2:6E:F7:E5:79:3F:CD:6C:70:F9:6E: 7E:E4:F7:3D:02:21:00:E9:F4:C8:52:5A:61:18:00:32: 31:F5:AE:A1:0C:60:39:8B:38:DA:68:B2:DD:D2:41:58: 8B:9D:91:4F:F8:84:31 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Sep 1 15:05:29.689 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:8D:07:BA:4A:40:5B:61:09:B5:B3:57: 32:F6:58:C1:C2:D3:2C:FB:90:B3:50:3C:70:B8:1E:BE: 7E:53:7B:88:45:02:21:00:A8:D2:25:E0:0C:93:72:3E: F4:F7:61:64:40:E6:C0:7C:F8:92:F3:60:03:C3:78:97: BB:6E:C6:ED:B4:05:AF:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Sep 1 15:05:29.709 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:65:CA:4B:46:72:41:26:0B:24:35:40:8D: 17:40:F8:02:F0:43:0E:38:44:53:CF:22:11:19:20:79: BD:75:DC:9E:02:20:2E:8C:B3:4B:24:BF:7C:43:BE:61: 4F:44:95:F7:93:66:8B:11:7F:80:98:E0:D3:8F:27:1E: 6A:FD:B7:73:63:3D
-----BEGIN CERTIFICATE----- MIIH0jCCBjqgAwIBAgIQPaVXCFo3zMpj+OTdISV54TANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAx MB4XDTI2MDkwMTE0NTUyOFoXDTI3MDMxOTE0NTUyN1owgYsxCzAJBgNVBAYTAkRF MQ8wDQYDVQQIDAZCZXJsaW4xDzANBgNVBAcMBkJlcmxpbjFJMEcGA1UECgxAVmVy ZWluIHouIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6 ZXMgREZOLVZlcmVpbjEPMA0GA1UEAwwGZGZuLmRlMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEA7ILRXMqtlgHup1xnDOB4GU5c1fFvGYRI6KFkcoP2M+98 P2hx5LNdoUojqNdqbXjxVjC4sd39UU0w7FoQro4MqQOOWwZuYPVl5Y2PgVf+G+ED veYBhbpW+xhn2anneQF15x7Rn0XNH7jWP8OL8vxjyXU3NlD2ddu4vG6aE8yZP+69 ommgf9UewT1J7xiE/ZQl6vH80ukxAtqG9doph7l6bHW9kJSHvlLJ8cPpJ7cx3wWr AymTioxCtAPxhEMN2x1Zb+4kXC0L/HVWfhd/NTG3Eutd5yVEHyfu/RN1UFrlLhYR Nf2lYCwj3+KPw78+zyO4uuKfyyDIx5HR2VoEmfJ/RKjGxgRogqsmU3wEbvD735st r5Oexs0KEq0rfKu5UrjwUk55L8stA5NlfDpwqgmA8aTEDHTRgjspjc0j6gwj3HhS QCehas+tZXXqMilDS98PjtBt5i1x5DMJEpyBbyshYcjL/7RdjgLms1RNj0GCcKJs by7tLtgQ+0UlXBQBh2qwVsllQ0cvNPoVsW0wtshA8cU55on03hmqhKzXVmOEcCu6 VDYSw7+LybbvPi3BOENWhvdPpZuaSktSk27KDCt+VPiJZg98uSY9Zt/Vk8Y3yDxK 52eJ0xpDW9mnl+sEKcc+RDUZmIX27Lz/ZgXEcURA0McfxpbUH9BBcCHzncwoqqMC AwEAAaOCAtowggLWMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUhgFyP4ypcOIx BlMWzgFfW3nIPDswSAYIKwYBBQUHAQEEPDA6MDgGCCsGAQUFBzAChixodHRwOi8v Y3J0LmhhcmljYS5nci9IQVJJQ0EtR0VBTlQtVExTLVIxLmNlcjAdBgNVHREEFjAU ggZkZm4uZGWCCnd3dy5kZm4uZGUwLQYDVR0gBCYwJDAIBgZngQwBAgIwCAYGBACP egEHMA4GDCsGAQQBgc8RAQEBAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwEwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5oYXJpY2EuZ3IvSEFSSUNB LUdFQU5ULVRMUy1SMS5jcmwwHQYDVR0OBBYEFP+ZsirBqtSt36iD+RMIpyJr9Ebs MA4GA1UdDwEB/wQEAwIFoDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAYEya r3p/d18B1Ab8kg3ImesLHH34yVIb+voXdzuXi8kAAAGgXYD+CQAABAMARzBFAiBH FHNfR43zpwpsiMvVGl4Nb7Ju9+V5P81scPlufuT3PQIhAOn0yFJaYRgAMjH1rqEM YDmLONpost3SQViLnZFP+IQxAHcARqI5Z8YNtkaHxm89+ZmUdpOmphEghFfVVefj 0KHZtkYAAAGgXYD9WQAABAMASDBGAiEAjQe6SkBbYQm1s1cy9ljBwtMs+5CzUDxw uB6+flN7iEUCIQCo0iXgDJNyPvT3YWRA5sB8+JLzYAPDeJe7bsbttAWvbwB1AAAa XRocLZN1tkhVePgvcaGubu85fSl8iuMVe8re4aAeAAABoF2A/W0AAAQDAEYwRAIg ZcpLRnJBJgskNUCNF0D4AvBDDjhEU88iERkgeb113J4CIC6Ms0skv3xDvmFPRJX3 k2aLEX+AmODTjyceav23c2M9MA0GCSqGSIb3DQEBCwUAA4IBgQCgQTQ/dHPe9X2u s5cQG4viuj/jwl44y1ZmmIkpJizAbYS+OlUkcVDQIC2oYu5LzTj/ngFfUfZ5XcNS 43CNZMHAWFDT93nfgvaYVs9RN7DUi/AOw0wQXu7oHWSgwcjxTYxDTkzgjgRhL6Gx FqqQ3hW9wRE8EWzy2zAifegV+CNkwTeFto0zF2K0d+H86AcA6bDo/bStMW2INYQx 9j8YJKHT0sWRAvW2SC8zyoK0xQ0F69Rvi80obU+sAI5/KesatJ7U6APHYncuqzVe Z0s9BbFHVtjgpybNZ3w2HtOODHtmbD8iTEPjp4124Ndx7kWElTEYqn6smawYsdp1 naU0maH3M+olz4GCPDzj3vjvxKw0qH32gVJAqrgQFYJqwCXbunj2L7pmduv3L0Zo dLkZk/M+UX9zfS2FEZtfY5IR8kdLXQReevWQkxZIuYtP53xQ9WbJMJf2dB3GQx3M ToNI1/tJ7rKkrkHMpUK30+MXx/0LVCWUdzPE+J91RGNhl6b2qyg= -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-20T07:20:43+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
- Issuer
- C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
- Valid from
- 2025-01-03T11:15:00+00:00
- Expires
- 2039-12-31T11:14:59+00:00
- Days remaining
- 4850
- Serial (hex)
- 14D57BF3692228219A5567FA91651B22
- Signature
- RSA-SHA256
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
5B:67:8D:C4:40:95:A5:28:95:B6:3B:31:F2:72:27:F4:B3:6C:3E:34:74:91:BF:2B:FA:69:18:37:A5:FB:8C:79
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- authorityKeyIdentifier
- 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
- authorityInfoAccess
- CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-RSA.cer
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
- subjectKeyIdentifier
- 86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGBTCCA+2gAwIBAgIQFNV782kiKCGaVWf6kWUbIjANBgkqhkiG9w0BAQsFADBs MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg Um9vdCBDQSAyMDIxMB4XDTI1MDEwMzExMTUwMFoXDTM5MTIzMTExMTQ1OVowYDEL MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl YXJjaCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBSU0EgMTCC AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKEEaZSzEzznAPk8IEa17GSG yJzPTj4cwRY7/vcq2BPT5+IRGxQtaCdgLXIEl2cdPdIkj2eyakFmgMjAtyeju8V8 dRayQCD/bWjJ7thDlowgLljQaXirxnYbT8bzRHAhCZqBakYgi5KWw9dANLyDHGpX UdY259ab0lWEaFE5Uu6IzQSMJOAy4l/Twym8GUiy0qMDEBFSlm31C9BXpdHKKAlh vIjMiKoDeTWl5vZaLB2MMRGY1yW2ftPgIP0/MkX1uFITlvHmmMTngxplH1nybEIJ FiwHg1KiLk1TprcZgeO2gxE5Lz3wTFWrsUlAzrh5xWmscWkjNi/4BpeuiT5+NExF czboLnXOfjuci/7bsnPi1/aZN/iKNbJRnngFoLaKVMmqCS7Xo34f+BITatryQZFE u2oDKExQGlxDBCfYMLgLucX/onpLzUSgeQITNLx6i5tGGbUYH+9Dy3GI66L/5tPj qzlOsydki8ZYGE5SBJeWCZ2IrhUe0WzZ2b6Zhk6JAQIDAQABo4IBLTCCASkwEgYD VR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQKSCOmYKSSCjPqk1vFV+olTb0S 7jBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jcnQuaGFyaWNh LmdyL0hBUklDQS1UTFMtUm9vdC0yMDIxLVJTQS5jZXIwEQYDVR0gBAowCDAGBgRV HSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg NaAzhjFodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtVExTLVJvb3QtMjAyMS1S U0EuY3JsMB0GA1UdDgQWBBSGAXI/jKlw4jEGUxbOAV9becg8OzAOBgNVHQ8BAf8E BAMCAYYwDQYJKoZIhvcNAQELBQADggIBABkssjQzYrOo4GMsKegaChP16yNe6Sck cWBymM455R2rMeuQ3zlxUNOEt+KUfgueOA2urp4j6TlPbs/XxpwuN3I1f09Luk5b +ZgRXM7obE6ZLTerVQWKoTShyl34R2XlK8pEy7+67Ht4lcJzt+K6K5gEuoPSGQDP ef+fUfmXrFcgBMcMbtfDb9dubFKNZZxo5nAXiqhFMOIyByag3H+tOTuH8zuId9pH RDsUpAIHJ9/W2WBfLcKav7IKRlNBRD/sPBy903J9WHPKwl8kQSDA+aa7XCYk7bJt Eyf+7GM9F5cZ7+YyknXqnv/rtQEkTKZdQo5Us18VFe9qqj94tXbLdk7PejJYNB4O Zlli44Ld7rtqfFlUych7gIxFOmiyxMQQYrYmUi+74lEZvfoNhuref0CupuKpz6O3 dLv6kO9T10uNdDBoBQTkge3UzHafTIe3R2o3ujXKUGPwyc9m7/FETyKLUCwSU/5O AVOeBCU8QtkKKjM8AmbpKpe3pHWcyq3R7B3LmIALkMPTydyDfxen65IDqREbVq8N xjhkJThUz40JqOlN6uqKqeDISj/IoucYwsqW24AlO7ZzNmohQmMi8ep23H4hBSh0 GBTe2XvkuzaNf92syK8l2HzO+13GLCjzYLTPvXTO9UpK8DGyfGZOuamuwbAnbNpE 3RfjV9IaUQGJ -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
- Issuer
- C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions RootCA 2015
- Valid from
- 2021-09-02T07:41:55+00:00
- Expires
- 2029-08-31T07:41:54+00:00
- Days remaining
- 1076
- Serial (hex)
- 2A6086D4D4DE45C95E4B98FBBF2FBF26
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
4A:CD:8D:C6:02:0A:54:5A:85:89:43:A5:53:B5:E0:F3:FC:5B:85:9A:EA:17:46:65:0D:69:CF:12:10:F9:56:D8
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- authorityKeyIdentifier
- 71:15:67:C8:C8:C9:BD:75:5D:72:D0:38:18:6A:9D:F3:71:24:54:0B
- authorityInfoAccess
- CA Issuers - URI:http://repo.harica.gr/certs/HaricaRootCA2015.crt
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HaricaRootCA2015.crl
- subjectKeyIdentifier
- 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGwDCCBKigAwIBAgIQKmCG1NTeRcleS5j7vy+/JjANBgkqhkiG9w0BAQsFADCB pjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVu aWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRo b3JpdHkxQDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJ bnN0aXR1dGlvbnMgUm9vdENBIDIwMTUwHhcNMjEwOTAyMDc0MTU1WhcNMjkwODMx MDc0MTU0WjBsMQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVt aWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNB IFRMUyBSU0EgUm9vdCBDQSAyMDIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAi8Lnr2WbBWeWyQ0kudAOZPzO4iQYLIR/d1HLBBE2uF7taXGnnuQlCZdn wUfCz5EWNmI9OAThUYL/rNK0ad0u7BGjRe5raztMv4yNpB6dEbnpOPl6DgyY4iMd 0U5j1Oe4QUT7a69r2h/TxZGIW6SJktGB5ow5WKDWaUOprZhSWG7bCvtrz2j646Re OkVzmAfqXwJy3gyls5+uqR23HbP8ilnnbnJlrfUwlCMH84IWSzWYnFO7L8rkWtnH jR38mJn7LKSCa/AqH44LX3FcXK5CeymJgcsDo5nKiJ4LQAlBM9vmWHr9rplwwFoP 1hOGcS92afyQ3dstbtHym/Uaa55vFYx68EsooCI4gCRsNqQ78jCR83gTz8E/Navx HREjtUMingGStxgC5RHRgtsVAMxhN8EqfJrh0LqzUEbugqydMfj7I+IDAEhwowkm eRVTYPM4XK046oEAYxS5M17dC9ugRQcaMwn4TbSnAqZp9MJZBYhlhVauS8vg3jx9 LRrI6fsfo2FK1ioTrXdMGhibkQ9Y2AZUxZf4qj8giqaFpnf2pvwc4u5ulDMqg1CE CuVPhvhQRXgAgetbaOMmjcx7XFH0FCxAvhpgHXpyYR0fYy2Iqs6iRZAI/Gu+s1Aq Wv2oSBhG1pBAkpAKhF5oMfjr7Q3THcZ9mRhVVidlLo1FxSTszuMCAwEAAaOCASEw ggEdMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUcRVnyMjJvXVdctA4GGqd 83EkVAswTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzAChjBodHRwOi8vcmVwby5o YXJpY2EuZ3IvY2VydHMvSGFyaWNhUm9vdENBMjAxNS5jcnQwEQYDVR0gBAowCDAG BgRVHSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAx MC+gLaArhilodHRwOi8vY3JsLmhhcmljYS5nci9IYXJpY2FSb290Q0EyMDE1LmNy bDAdBgNVHQ4EFgQUCkgjpmCkkgoz6pNbxVfqJU29Eu4wDgYDVR0PAQH/BAQDAgGG MA0GCSqGSIb3DQEBCwUAA4ICAQDAze/rVni3cYGP1BWkxXnIVynqHcC6Cw7kbkXo XBZAqF9ANQAKoz2YQ+WyzrparKVilMG6p6mdWTKeLy6eQDRhFSu9DrMYr4TBYxIp 2e5ZLQBk96xbG3wSepBCkTDA0MA0NybzM0gF5nTa82BMCED8EQXliWWsgqUorXuk 7msadosX793M42llmAcj1zJkADzlyzi4gcPvIc4skfmz1OW9jxxwyaR/41VYzPVy w7m0rsL9n3v5PCFJ1zrldYayKq9gOdwOZInNJQgPU6imXEFBZWdqdR+xdL7qHVMk dzBRoFqnYjr2bonw87Rxk7dAsdzmUUPJTIayzDTdtU78XkOl0FivJWBXDQPiVB2Z 5NdOVPUANDnADA5octuC3YTG2ncpG9aNKM4ggAyr3imdnz5UZdioYkecv2TVJHT2 lXE5PH/ifJs8p9+WFgyzFsW97BUF1nKsZiUWvlyPY9C9PKuhI4OMeTEA99YIRXYj XDSZq300ko5sXUVKVG2osAR4Sr3wqS5hLGNBfym7FZwsQ+/ja+fenEALAbAiEMpI 9h71lpMpIhdx7rdRznNeSOok/pVMaqvBZ0IvAq+yXb7d8C+tAND0IcUxYyyJqkE7 89RJdcGZO9JMXv4inBFIEuMAMlGPxzcroEx+ehDXyGR0asw7CooV2DCfiEJlIsKz LcPZew== -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.