{"domain":"fourseasons.com","port":443,"address":"16.54.79.10","resolved_addresses":["16.54.79.10","16.55.71.160"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"CA","ST":"Ontario","O":"Four Seasons Hotels Limited","CN":"fourseasons.com"},"issuer":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication CA OV R36"},"serial":"DC14B5B393200C4AD8E4CC166550795A","version":3,"valid_from":"2026-08-20T00:00:00+00:00","valid_to":"2027-03-06T23:59:59+00:00","validity":"valid_period","days_remaining":128,"san":"DNS:fourseasons.com, DNS:carrieres.fourseasons.com, DNS:fonts.fourseasons.com, DNS:m.fourseasons.com, DNS:magazine.fourseasons.com, DNS:preferredpartners.fourseasons.com, DNS:press.fourseasons.com, DNS:reservations.fourseasons.com, DNS:residences.fourseasons.com, DNS:residentialbrandhub.fourseasons.com, DNS:secure.fourseasons.com, DNS:stay.fourseasons.com, DNS:www.1.fourseasons.com, DNS:www.fourseasons.com","signature":"RSA-SHA256","sha256":"F2:97:2E:DE:AD:1F:48:BC:8E:14:3F:32:FD:8F:C4:01:87:CE:67:4F:A9:DE:81:80:B9:C5:6F:6E:2A:CB:4A:24","key_type":"RSA","key_bits":4096,"curve":null,"extensions":{"authorityKeyIdentifier":"E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92","subjectKeyIdentifier":"07:9E:BD:55:45:D1:0C:3B:75:E0:C6:52:2C:BB:BA:B9:37:36:4B:48","keyUsage":"Digital Signature, Key Encipherment","basicConstraints":"CA:FALSE","extendedKeyUsage":"TLS Web Server Authentication","certificatePolicies":"Policy: 1.3.6.1.4.1.6449.1.2.1.3.4\n  CPS: https://sectigo.com/CPS\nPolicy: 2.23.140.1.2.2","crlDistributionPoints":"Full Name:\n  URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl\n","authorityInfoAccess":"CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt\nOCSP - URI:http://ocsp.sectigo.com","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Aug 20 15:05:56.728 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:0D:0B:2C:8A:2F:14:D2:D8:17:7C:D4:9A:\n                C7:A0:37:21:23:34:A8:83:00:95:47:9B:29:B0:6C:9D:\n                58:59:01:D6:02:21:00:9C:5F:FF:A2:91:2C:EF:68:87:\n                78:B5:08:97:26:92:89:9B:5B:20:D2:A3:5A:95:F2:57:\n                2D:56:04:E6:44:53:53\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46:\n                FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8\n    Timestamp : Aug 20 15:05:56.783 2026 GMT\n    Extensions: 00:00:05:00:09:E5:8E:FD\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:D0:A1:E8:5D:63:84:C9:5A:93:22:6E:\n                E3:51:83:03:A0:A3:C8:8D:72:45:A7:88:DC:E8:56:5E:\n                22:34:C7:F2:12:02:21:00:F0:9F:E4:A4:62:5A:26:E3:\n                D9:5A:C5:E2:41:20:9D:13:FE:7C:34:35:01:C5:F4:FF:\n                38:12:20:CE:73:F8:D5:C8\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90:\n                4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59\n    Timestamp : Aug 20 15:05:56.844 2026 GMT\n    Extensions: 00:00:05:00:01:91:65:2A\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:8D:DA:D9:BA:43:25:25:15:82:AC:A4:\n                0B:B8:C0:BE:0E:0C:CA:4E:9B:DD:4A:4E:48:D6:4C:97:\n                C2:AE:25:DF:9F:02:21:00:A7:95:6C:F2:3D:3C:5A:2B:\n                74:70:D5:03:31:A1:10:AF:12:D2:17:55:DC:09:1B:2D:\n                77:D8:5B:FD:05:84:FC:C6","subjectAltName":"DNS:fourseasons.com, DNS:carrieres.fourseasons.com, DNS:fonts.fourseasons.com, DNS:m.fourseasons.com, DNS:magazine.fourseasons.com, DNS:preferredpartners.fourseasons.com, DNS:press.fourseasons.com, DNS:reservations.fourseasons.com, DNS:residences.fourseasons.com, DNS:residentialbrandhub.fourseasons.com, DNS:secure.fourseasons.com, DNS:stay.fourseasons.com, DNS:www.1.fourseasons.com, DNS:www.fourseasons.com"},"pem":"-----BEGIN CERTIFICATE-----\nMIIJdDCCB9ygAwIBAgIRANwUtbOTIAxK2OTMFmVQeVowDQYJKoZIhvcNAQELBQAw\nYDELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE\nAxMuU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIENBIE9WIFIz\nNjAeFw0yNjA4MjAwMDAwMDBaFw0yNzAzMDYyMzU5NTlaMF8xCzAJBgNVBAYTAkNB\nMRAwDgYDVQQIEwdPbnRhcmlvMSQwIgYDVQQKExtGb3VyIFNlYXNvbnMgSG90ZWxz\nIExpbWl0ZWQxGDAWBgNVBAMTD2ZvdXJzZWFzb25zLmNvbTCCAiIwDQYJKoZIhvcN\nAQEBBQADggIPADCCAgoCggIBAP0tC5Jee5wxgk8IeqxjV5h+UwpdyYrokvL4kQ2+\nPFhXu48ophM3sYiJPfVeCFf42Ye+KE1pLv1OzmV+2637OYBKDXVqCXxoJ4iIH2za\nqWlzbPvdfQmaUxs/VSVCS2zvvD65Ik/fpb6Br6N/RtqK0QULzwOheN94Tsj5zMB/\nTHkjNs+hIY96CeiKOqu+rfpJuq1n6aEVWFS46KsXcSi7jY1WABdlbylGBGqrBhAP\n/0xYO3poLQea50ANk3/zdlL5XUJLNPBGeSjleZrf0rmut3iPt6krN/dDLBMGjVtk\nhNC+68drXbG9A8EPLR3JuYUnpqbnBLPH30XI/Quj+/xeZQyJMC5kOB3467gU/EkL\nuTiBuMTl1oyBQwYysDl7oqZqSZNQxXUWpnqseyhV4rEqLG7bln1ksa0kUSJHG8oQ\nMApk5a0p/n0NWAyAye0CGsldisLA+pr8PHWCy4Lb9CiPbSOQKnoN0I6x4YFgbjM/\nRlC1iVgjvHSPJS28CCr/RHQDt8Uw/8//7qiojiDfk1tQl++PBwsNWpwmmx5hhE05\nOOwjD0jqpURpk1VuPtQ58LBqGp0OfhH94VSHSA1r15dnSJ5y/QK/MKiwZsFYmXnB\nNsz/3cbAxh/VshQ3vDjcYWiYEVoWhOFKamGlwdOSBrzioGSEZ1K3RGvlBkUr0rfm\nyj5rAgMBAAGjggSoMIIEpDAfBgNVHSMEGDAWgBTjZnS7cGiNLF1ODqZKj5s3IpyC\nkjAdBgNVHQ4EFgQUB569VUXRDDt14MZSLLu6uTc2S0gwDgYDVR0PAQH/BAQDAgWg\nMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwSgYDVR0gBEMwQTA1\nBgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNv\nbS9DUFMwCAYGZ4EMAQICMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuc2Vj\ndGlnby5jb20vU2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uQ0FPVlIz\nNi5jcmwwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5z\nZWN0aWdvLmNvbS9TZWN0aWdvUHVibGljU2VydmVyQXV0aGVudGljYXRpb25DQU9W\nUjM2LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggGQ\nBgorBgEEAdZ5AgQCBIIBgASCAXwBegB2AByfaCzp+vBFaVD4G5aKh93bMhDYTObI\nsuOCUkrEz1mfAAABoB+1FvgAAAQDAEcwRQIgDQssii8U0tgXfNSax6A3ISM0qIMA\nlUebKbBsnVhZAdYCIQCcX/+ikSzvaId4tQiXJpKJm1sg0qNalfJXLVYE5kRTUwB/\nAI7KRwus3mrzogawpHqEt0b+H8a/lT4l5ptO5AJI88boAAABoB+1Fy8ACAAABQAJ\n5Y79BAMASDBGAiEA0KHoXWOEyVqTIm7jUYMDoKPIjXJFp4jc6FZeIjTH8hICIQDw\nn+SkYlom49laxeJBIJ0T/nw0NQHF9P84EiDOc/jVyAB/AFlubDOGlLJZcqJWyKDo\n3ZBKdugIPdqHOwEIOCgUPO5ZAAABoB+1F2wACAAABQABkWUqBAMASDBGAiEAjdrZ\nukMlJRWCrKQLuMC+DgzKTpvdSk5I1kyXwq4l358CIQCnlWzyPTxaK3Rw1QMxoRCv\nEtIXVdwJGy132Fv9BYT8xjCCAXAGA1UdEQSCAWcwggFjgg9mb3Vyc2Vhc29ucy5j\nb22CGWNhcnJpZXJlcy5mb3Vyc2Vhc29ucy5jb22CFWZvbnRzLmZvdXJzZWFzb25z\nLmNvbYIRbS5mb3Vyc2Vhc29ucy5jb22CGG1hZ2F6aW5lLmZvdXJzZWFzb25zLmNv\nbYIhcHJlZmVycmVkcGFydG5lcnMuZm91cnNlYXNvbnMuY29tghVwcmVzcy5mb3Vy\nc2Vhc29ucy5jb22CHHJlc2VydmF0aW9ucy5mb3Vyc2Vhc29ucy5jb22CGnJlc2lk\nZW5jZXMuZm91cnNlYXNvbnMuY29tgiNyZXNpZGVudGlhbGJyYW5kaHViLmZvdXJz\nZWFzb25zLmNvbYIWc2VjdXJlLmZvdXJzZWFzb25zLmNvbYIUc3RheS5mb3Vyc2Vh\nc29ucy5jb22CFXd3dy4xLmZvdXJzZWFzb25zLmNvbYITd3d3LmZvdXJzZWFzb25z\nLmNvbTANBgkqhkiG9w0BAQsFAAOCAYEAGD2kYf4n+kQ/pThIxRJMqCZqN1EFt+Cl\nEXNwU8zW3ZcVR3ZpGso0LICiaFTyjGROQYxVpRccdezdtFzXHQ5RrWSMJIhZi2cY\nvABqom8ckalxTQVS1tMPlfu/jKtUKxT/Nl2oeoJ9RopQb9VbeJtgmZEqkm37xBW/\nJGAVyd6ssPtAOrED5tMqcRZg/qTLlFbpUnz4Pjvp6ITWj/zhbJwEGv120vjGa9KI\nToevPyCa4GeO7G0V3SuSuZC6G6fqhVXS+akzDCJqARLhPD+N2q0TANK9n4STZh/p\nSgBjq4v/a1S6URk5Ka5MuR7f16ygyZ4fIp1boxUKYi+5oIe39SCF81jM0VENBPsx\nxXGsMFuRR1wxslV3cqshN5Lm87g6gp1p2TuajIf3V50QeZ7YaBen9KMmMq7Ouuzu\nB4rnpCE5AbfryCx/z4qgG3JiupH4dNr0zynjlZtgo64D+NkHPYH8PBQMFzJsYrMr\nEdMp62PAz9g9IrcAHVxycO4/Rtk+to2Q\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication CA OV R36"},"issuer":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication Root R46"},"serial":"2C1A3C76E943DDDDFF191B31890AED71","version":3,"valid_from":"2021-03-22T00:00:00+00:00","valid_to":"2036-03-21T23:59:59+00:00","validity":"valid_period","days_remaining":3431,"san":"","signature":"RSA-SHA384","sha256":"65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30","key_type":"RSA","key_bits":3072,"curve":null,"extensions":{"authorityKeyIdentifier":"56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49","subjectKeyIdentifier":"E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","basicConstraints":"CA:TRUE, pathlen:0","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","certificatePolicies":"Policy: X509v3 Any Policy\nPolicy: 2.23.140.1.2.2","crlDistributionPoints":"Full Name:\n  URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl\n","authorityInfoAccess":"CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c\nOCSP - URI:http://ocsp.sectigo.com"},"pem":"-----BEGIN CERTIFICATE-----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\n58uB9/7lud0G3x0pxQAcffP0ayKavNwDTw4UfJ34cEw=\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"16.54.79.10","verified":true,"error":null}],"checked_at":"2026-10-29T10:50:29+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}