{"domain":"bdo.de","port":443,"address":"20.107.224.11","resolved_addresses":["20.107.224.11"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"bdo.de"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"GeoTrust TLS RSA CA G1"},"serial":"085C5CCFF27FB4F91666A1116D65EA12","version":3,"valid_from":"2026-11-05T00:00:00+00:00","valid_to":"2027-05-05T23:59:59+00:00","validity":"valid_period","days_remaining":174,"san":"DNS:bdo.de","signature":"RSA-SHA256","sha256":"37:D5:0A:D9:DA:B9:1B:95:45:6F:51:48:64:8F:79:4F:0F:FE:2E:18:40:D6:81:AB:96:66:50:35:EF:30:33:F4","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"authorityKeyIdentifier":"94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57","subjectKeyIdentifier":"C9:33:9F:01:47:34:DB:DF:36:8F:05:AE:64:FB:FB:8F:31:A3:49:97","subjectAltName":"DNS:bdo.de","certificatePolicies":"Policy: 2.23.140.1.2.1\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1-3.crl\n","authorityInfoAccess":"OCSP - URI:http://status.geotrust.com\nCA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Nov  5 04:57:57.935 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:FD:60:1E:CA:41:78:6E:09:13:20:92:\n                3C:F4:FA:E7:9B:2A:2E:5B:E6:BD:27:1F:77:E2:43:F7:\n                14:A1:4A:A2:BF:02:21:00:B8:9D:B4:9B:45:AB:ED:1F:\n                38:FE:8F:AC:3C:B2:43:FA:F8:12:7E:3A:7D:4D:90:23:\n                3F:C7:7E:CE:69:9E:F3:23\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF:\n                EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02\n    Timestamp : Nov  5 04:57:57.943 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:AA:2A:FE:84:B7:12:3E:EC:7F:0B:2E:\n                23:01:30:3D:A4:ED:E7:26:67:BD:6A:72:E8:62:69:95:\n                6D:24:E9:47:A6:02:20:23:10:59:4F:17:AB:C0:7E:04:\n                C1:47:4B:35:51:B5:07:B2:5A:04:5F:3C:65:3D:63:9E:\n                A9:5E:61:E4:70:32:2D\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46:\n                FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8\n    Timestamp : Nov  5 04:57:58.148 2026 GMT\n    Extensions: 00:00:05:00:38:D2:8B:3B\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:20:E4:5E:40:4B:4A:B3:00:EC:6F:FF:06:\n                77:97:7A:1D:92:E5:0B:F9:FE:5D:87:D2:E3:5C:55:6F:\n                E5:BA:12:DD:02:20:64:42:04:F6:AC:91:EC:9D:7C:94:\n                41:7E:29:ED:37:5B:38:73:75:F3:B3:63:98:41:3D:90:\n                FF:2C:AC:D8:1C:19"},"pem":"-----BEGIN CERTIFICATE-----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\n35+Gw05V7EnZqmDrKMlonjK3Z3lRGlRqsMw=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"GeoTrust TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"0D07782A133FC6F9A57296E131FFD179","version":3,"valid_from":"2017-11-02T12:23:37+00:00","valid_to":"2027-11-02T12:23:37+00:00","validity":"valid_period","days_remaining":354,"san":"","signature":"RSA-SHA256","sha256":"C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\n7h4SeM6Y8l/7MBRpPCz6l8Y=\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"20.107.224.11","verified":true,"error":null}],"checked_at":"2026-11-12T14:53:55+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}