{"domain":"freestone.net","port":443,"address":"193.5.68.20","resolved_addresses":["193.5.68.20","2001:67c:8:abcd::20"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"caladan.freestone.net"},"issuer":{"C":"US","O":"Let's Encrypt","CN":"YE1"},"serial":"055C6AE81E59D2F9254706559EFCB53CF4D7","version":3,"valid_from":"2026-09-03T17:27:34+00:00","valid_to":"2026-12-02T17:27:33+00:00","validity":"valid_period","days_remaining":69,"san":"DNS:caladan.freestone.net, DNS:freestone.ch, DNS:freestone.dev, DNS:freestone.net, DNS:www.freestone.ch, DNS:www.freestone.dev, DNS:www.freestone.net","signature":"ecdsa-with-SHA384","sha256":"C1:23:6B:63:96:D1:52:67:3F:4A:E6:9A:97:BA:48:00:D1:B0:B3:A9:95:9B:09:27:D3:16:8F:9B:10:B2:E9:A2","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"keyUsage":"Digital Signature","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:FALSE","subjectKeyIdentifier":"1A:F2:1E:2E:32:6E:E9:6A:07:87:2D:38:B9:74:71:91:23:0E:A6:FD","authorityKeyIdentifier":"BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8","authorityInfoAccess":"CA Issuers - URI:http://ye1.i.lencr.org/","subjectAltName":"DNS:caladan.freestone.net, DNS:freestone.ch, DNS:freestone.dev, DNS:freestone.net, DNS:www.freestone.ch, DNS:www.freestone.dev, DNS:www.freestone.net","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://ye1.c.lencr.org/88.crl\n","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:\n                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7\n    Timestamp : Sep  3 18:26:04.625 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:DA:37:38:09:7F:C6:FC:E1:27:EF:3E:\n                18:49:42:F5:27:91:8F:E2:76:9C:0C:62:08:63:06:47:\n                99:58:EA:00:5F:02:20:06:1E:07:D3:9B:A5:EC:E3:E0:\n                C9:81:BE:40:43:01:0A:5F:A4:62:49:2D:87:BD:75:1A:\n                6E:8F:7C:C9:E0:DF:B1\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:\n                1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A\n    Timestamp : Sep  3 18:26:05.032 2026 GMT\n    Extensions: 00:00:05:00:2D:02:D4:A0\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:C4:CC:EE:66:A2:05:E3:28:88:1A:D2:\n                E1:EC:72:DC:64:4D:AA:08:EA:E0:E9:69:19:F4:58:70:\n                74:08:8F:DC:A8:02:20:07:85:94:3C:83:66:38:72:CA:\n                CA:73:FD:89:A7:42:9B:DE:A8:9B:42:36:BB:DA:80:21:\n                94:6F:C6:98:48:5A:04"},"pem":"-----BEGIN CERTIFICATE-----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\no2ybqYo49aUtB9dCT//wtUg=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"Let's Encrypt","CN":"YE1"},"issuer":{"C":"US","O":"ISRG","CN":"Root YE"},"serial":"5DDD70DD31F801C85C186A7A04B80AFE","version":3,"valid_from":"2025-09-03T00:00:00+00:00","valid_to":"2028-09-02T23:59:59+00:00","validity":"valid_period","days_remaining":710,"san":"","signature":"ecdsa-with-SHA384","sha256":"A2:37:2D:06:43:1E:97:16:36:5E:EE:D4:7E:C0:20:35:14:97:D1:82:FC:C0:38:E4:57:E5:81:68:A0:3C:AC:07","key_type":"EC","key_bits":384,"curve":"secp384r1","extensions":{"keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:TRUE, pathlen:0","subjectKeyIdentifier":"BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8","authorityKeyIdentifier":"A3:C8:26:5A:8E:A1:4C:D0:35:63:FC:9B:23:C8:3A:AE:56:F3:4F:56","authorityInfoAccess":"CA Issuers - URI:http://ye.i.lencr.org/","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://ye.c.lencr.org/\n"},"pem":"-----BEGIN CERTIFICATE-----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\nVKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA==\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"ISRG","CN":"Root YE"},"issuer":{"C":"US","O":"Internet Security Research Group","CN":"ISRG Root X2"},"serial":"872165FC34B6E5FBA8ADD5B3705FB53A","version":3,"valid_from":"2026-05-13T00:00:00+00:00","valid_to":"2032-09-02T23:59:59+00:00","validity":"valid_period","days_remaining":2171,"san":"","signature":"ecdsa-with-SHA384","sha256":"0F:C0:90:1C:CA:2B:AE:9E:9F:DB:B0:2D:50:D0:2F:10:94:F7:B3:66:72:08:69:91:B9:E8:97:62:6D:C4:85:F0","key_type":"EC","key_bits":384,"curve":"secp384r1","extensions":{"keyUsage":"Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:TRUE","subjectKeyIdentifier":"A3:C8:26:5A:8E:A1:4C:D0:35:63:FC:9B:23:C8:3A:AE:56:F3:4F:56","authorityKeyIdentifier":"7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95","authorityInfoAccess":"CA Issuers - URI:http://x2.i.lencr.org/","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://x2.c.lencr.org/\n"},"pem":"-----BEGIN CERTIFICATE-----\nMIICpjCCAiugAwIBAgIRAIchZfw0tuX7qK3Vs3BftTowCgYIKoZIzj0EAwMwTzEL\nMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo\nIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjYwNTEzMDAwMDAwWhcN\nMzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4G\nA1UEAxMHUm9vdCBZRTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDwS/6vhrcVqcbBo\n+wgdI3fwn9x7DNJJOY/lTOti0vkwuRN87RhEhTH17E7XyFjWsPYhIPt/wzOqxTd2\nb+4ZJNy9ID04YywF9U5zasDVyGSNErVNtz8uSGh5izW87j77GaOB6zCB6DAOBgNV\nHQ8BAf8EBAMCAQYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB\n/zAdBgNVHQ4EFgQUo8gmWo6hTNA1Y/ybI8g6rlbzT1YwHwYDVR0jBBgwFoAUfEKW\nrt5LSDv6kviejM9ti6lyN5UwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZo\ndHRwOi8veDIuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1Ud\nHwQgMB4wHKAaoBiGFmh0dHA6Ly94Mi5jLmxlbmNyLm9yZy8wCgYIKoZIzj0EAwMD\naQAwZgIxAMU19WCtmxVND8UHBZRoma49Z7jPs64Dma0eTu1OChVbB/2J7GV3nvYK\nAx54uk1G9QIxAO0miLVJu8PLNiXXXkiE/gsK3CTRTF/aeo4bMX42Zw40csRU6AC2\n6hSW1/IWaas6dg==\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"Internet Security Research Group","CN":"ISRG Root X2"},"issuer":{"C":"US","O":"Internet Security Research Group","CN":"ISRG Root X1"},"serial":"6C8F1DC727C7117F7BAF853AC980F9CD","version":3,"valid_from":"2026-05-13T00:00:00+00:00","valid_to":"2032-09-02T23:59:59+00:00","validity":"valid_period","days_remaining":2171,"san":"","signature":"RSA-SHA256","sha256":"EE:5F:7A:BD:69:81:BB:02:55:63:2C:D8:F4:92:83:45:1B:4B:18:84:4D:12:04:0B:44:EE:00:F0:7B:8F:E2:C6","key_type":"EC","key_bits":384,"curve":"secp384r1","extensions":{"keyUsage":"Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE","subjectKeyIdentifier":"7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95","authorityKeyIdentifier":"79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E","authorityInfoAccess":"CA Issuers - URI:http://x1.i.lencr.org/","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://x1.c.lencr.org/\n"},"pem":"-----BEGIN CERTIFICATE-----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\nTT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"193.5.68.20","verified":true,"error":null}],"checked_at":"2026-09-23T18:31:50+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}