{"domain":"demando.de","port":443,"address":"91.213.56.96","resolved_addresses":["91.213.56.96"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"DE","L":"Kaiserslautern","O":"Demando GmbH","CN":"*.demando.de"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"serial":"0704C4AD17F0A3499FAF7B98F139ED2F","version":3,"valid_from":"2026-08-31T00:00:00+00:00","valid_to":"2027-03-17T23:59:59+00:00","validity":"valid_period","days_remaining":129,"san":"DNS:*.demando.de, DNS:demando.de","signature":"RSA-SHA256","sha256":"9E:DA:FF:C7:3A:E3:25:97:91:C1:DE:2C:28:E6:CB:6E:48:59:9C:99:F5:C1:C9:54:44:D2:A0:62:9C:7B:2E:4F","key_type":"RSA","key_bits":4096,"curve":null,"extensions":{"authorityKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","subjectKeyIdentifier":"98:AA:4A:82:26:08:98:C2:09:9B:22:14:57:2B:C0:E5:F3:83:81:D1","subjectAltName":"DNS:*.demando.de, DNS:demando.de","certificatePolicies":"Policy: 2.23.140.1.2.2\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.thawte.com\nCA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Aug 31 11:17:09.325 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:CD:CF:93:D2:74:42:6C:0F:A9:10:FB:\n                43:96:78:E6:FA:BA:44:9A:DE:F9:F7:CC:85:BE:E5:1F:\n                B3:87:E1:BC:B8:02:20:7A:62:83:EF:29:BB:90:4E:3B:\n                64:DF:72:40:9E:69:7E:A6:9D:79:81:EE:71:2C:D6:B1:\n                F6:99:55:26:76:DA:18\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF:\n                EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02\n    Timestamp : Aug 31 11:17:09.311 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:B0:69:22:C9:31:C7:B3:54:00:F5:39:\n                BC:96:34:51:70:0E:BF:94:EB:A4:20:21:FD:B2:E8:99:\n                B3:DA:32:45:35:02:20:54:9F:B5:90:20:05:71:72:F9:\n                07:BF:51:38:76:FF:0A:83:9C:D9:91:23:DB:62:A6:93:\n                CC:A4:78:26:F3:76:AC\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1:\n                BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66\n    Timestamp : Aug 31 11:17:09.376 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:66:20:45:49:4E:6B:D5:9E:DC:78:13:8C:\n                62:71:61:EC:D9:E9:F2:7E:E4:92:1F:0A:50:E7:CF:25:\n                D1:0F:13:CF:02:21:00:C5:79:12:CA:82:7B:4D:1A:E4:\n                C4:BB:67:56:A2:19:12:36:CF:D5:AE:26:AA:C5:53:2B:\n                15:5D:05:12:A4:09:7D"},"pem":"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"090EE8C5DE5BFA62D2AE2FF7097C4857","version":3,"valid_from":"2017-11-02T12:24:25+00:00","valid_to":"2027-11-02T12:24:25+00:00","validity":"valid_period","days_remaining":358,"san":"","signature":"RSA-SHA256","sha256":"4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\nTYNYQI+BXG1R1cABlold\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"91.213.56.96","verified":true,"error":null}],"checked_at":"2026-11-08T15:07:01+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}