{"domain":"citrahost.com","port":443,"address":"104.21.11.173","resolved_addresses":["104.21.11.173","172.67.166.178","2606:4700:3034::6815:bad","2606:4700:3035::ac43:a6b2"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"citrahost.com"},"issuer":{"C":"US","O":"Google Trust Services","CN":"WE1"},"serial":"47A81F1D3269E9580E84F8152C3B32CE","version":3,"valid_from":"2026-09-26T17:37:43+00:00","valid_to":"2026-12-25T18:36:29+00:00","validity":"valid_period","days_remaining":78,"san":"DNS:citrahost.com, DNS:*.citrahost.com","signature":"ecdsa-with-SHA256","sha256":"71:17:70:3D:68:D6:FF:95:C0:38:80:87:0D:15:B8:9F:F8:68:AC:85:AA:82:82:59:D6:B4:9E:5F:93:DD:B5:9C","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"keyUsage":"Digital Signature","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:FALSE","subjectKeyIdentifier":"74:EB:EC:93:4A:F4:74:82:FD:9D:94:80:78:CE:6B:24:14:B8:34:59","authorityKeyIdentifier":"90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38","authorityInfoAccess":"CA Issuers - URI:http://i.pki.goog/we1.crt","subjectAltName":"DNS:citrahost.com, DNS:*.citrahost.com","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://c.pki.goog/we1/MsDiaG_A19k.crl\n","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : ED:DA:EB:81:5C:63:21:34:49:B4:7B:E5:07:79:05:AB:\n                D0:D9:31:47:C2:7A:C5:14:6B:3B:C5:8E:43:E9:B6:C7\n    Timestamp : Sep 26 18:37:43.743 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:78:2E:4C:59:EF:E0:C3:1D:AF:C8:A2:7D:\n                53:6E:66:A7:80:44:CD:D2:2E:89:85:6E:BA:DE:61:46:\n                E0:50:E1:2B:02:21:00:F8:D1:85:56:7A:80:38:DA:3D:\n                EE:A8:D2:EA:4D:DD:B0:D6:B9:D3:6B:A3:2C:B0:28:12:\n                F7:6C:F3:DD:A6:15:09\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n    Timestamp : Sep 26 18:37:43.625 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:A9:8B:57:11:B7:A3:9D:33:4F:9C:F9:\n                EF:7E:7F:44:41:24:2B:79:BA:36:30:08:55:C4:23:62:\n                41:3A:95:FB:5A:02:20:06:52:64:11:EF:00:91:83:E1:\n                25:13:FC:38:40:67:A6:DF:53:82:0E:74:6C:01:DE:99:\n                E4:65:C9:11:86:3A:FE"},"pem":"-----BEGIN CERTIFICATE-----\nMIIDgjCCAyegAwIBAgIQR6gfHTJp6VgOhPgVLDsyzjAKBggqhkjOPQQDAjA7MQsw\nCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQwwCgYD\nVQQDEwNXRTEwHhcNMjYwOTI2MTczNzQzWhcNMjYxMjI1MTgzNjI5WjAYMRYwFAYD\nVQQDEw1jaXRyYWhvc3QuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4NZu\n2HtXrm4pRYfr1Tv8SXhF5izaPx5Mo4Li1Q92vB7h56NWYRY0AIyrGWJqBfBAWrA3\nbJIz0bLtddH5kRZu0qOCAi4wggIqMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAK\nBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR06+yTSvR0gv2dlIB4\nzmskFLg0WTAfBgNVHSMEGDAWgBSQd5I1Z8T/qMyp5nvZgHl7zJP5ODA1BggrBgEF\nBQcBAQQpMCcwJQYIKwYBBQUHMAKGGWh0dHA6Ly9pLnBraS5nb29nL3dlMS5jcnQw\nKQYDVR0RBCIwIIINY2l0cmFob3N0LmNvbYIPKi5jaXRyYWhvc3QuY29tMBMGA1Ud\nIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5n\nb29nL3dlMS9Nc0RpYUdfQTE5ay5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA\ndgDt2uuBXGMhNEm0e+UHeQWr0NkxR8J6xRRrO8WOQ+m2xwAAAaDfAke/AAAEAwBH\nMEUCIHguTFnv4MMdr8iifVNuZqeARM3SLomFbrreYUbgUOErAiEA+NGFVnqAONo9\n7qjS6k3dsNa502ujLLAoEvds892mFQkAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh\n0LMBcxfAyMVpdwAAAaDfAkdJAAAEAwBHMEUCIQCpi1cRt6OdM0+c+e9+f0RBJCt5\nujYwCFXEI2JBOpX7WgIgBlJkEe8AkYPhJRP8OEBnpt9Tgg50bAHemeRlyRGGOv4w\nCgYIKoZIzj0EAwIDSQAwRgIhALiww4/2Y67lGX0Tot6tEL2SCVaB5XgBURxafFmF\n2LrNAiEAqmD3nI0AL8vhZnF9sAO1LhxUA+BEH+dG5ldBzc2bwVM=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"Google Trust Services","CN":"WE1"},"issuer":{"C":"US","O":"Google Trust Services LLC","CN":"GTS Root R4"},"serial":"7FF31977972C224A76155D13B6D685E3","version":3,"valid_from":"2023-12-13T09:00:00+00:00","valid_to":"2029-02-20T14:00:00+00:00","validity":"valid_period","days_remaining":866,"san":"","signature":"ecdsa-with-SHA384","sha256":"1D:FC:16:05:FB:AD:35:8D:8B:C8:44:F7:6D:15:20:3F:AC:9C:A5:C1:A7:9F:D4:85:7F:FA:F2:86:4F:BE:BF:96","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","subjectKeyIdentifier":"90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38","authorityKeyIdentifier":"80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C","authorityInfoAccess":"CA Issuers - URI:http://i.pki.goog/r4.crt","crlDistributionPoints":"Full Name:\n  URI:http://c.pki.goog/r/r4.crl\n","certificatePolicies":"Policy: 2.23.140.1.2.1"},"pem":"-----BEGIN CERTIFICATE-----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\n7uJW\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"Google Trust Services LLC","CN":"GTS Root R4"},"issuer":{"C":"BE","O":"GlobalSign nv-sa","OU":"Root CA","CN":"GlobalSign Root CA"},"serial":"7FE530BF331343BEDD821610493D8A1B","version":3,"valid_from":"2023-11-15T03:43:21+00:00","valid_to":"2028-01-28T00:00:42+00:00","validity":"valid_period","days_remaining":476,"san":"","signature":"RSA-SHA256","sha256":"76:B2:7B:80:A5:80:27:DC:3C:F1:DA:68:DA:C1:70:10:ED:93:99:7D:0B:60:3E:2F:AD:BE:85:01:24:93:B5:A7","key_type":"EC","key_bits":384,"curve":"secp384r1","extensions":{"keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE","subjectKeyIdentifier":"80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C","authorityKeyIdentifier":"60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B","authorityInfoAccess":"CA Issuers - URI:http://i.pki.goog/gsr1.crt","crlDistributionPoints":"Full Name:\n  URI:http://c.pki.goog/r/gsr1.crl\n","certificatePolicies":"Policy: 2.23.140.1.2.1"},"pem":"-----BEGIN CERTIFICATE-----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\nvepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"104.21.11.173","verified":true,"error":null}],"checked_at":"2026-10-08T06:34:33+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}