{"domain":"hetzner.de","port":443,"address":"213.133.116.44","resolved_addresses":["213.133.116.44","2a01:4f8:0:1::7:4"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"*.hetzner.de"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"serial":"0638616F06BA5793F0B0B21568534756","version":3,"valid_from":"2026-09-21T00:00:00+00:00","valid_to":"2027-04-07T23:59:59+00:00","validity":"valid_period","days_remaining":154,"san":"DNS:*.hetzner.de, DNS:hetzner.de","signature":"RSA-SHA256","sha256":"BF:75:23:BE:C5:E6:0C:91:C5:C0:F3:63:E5:6F:36:5D:CD:C6:A6:28:EF:72:4F:D4:CD:47:C6:1C:7F:E0:14:A6","key_type":"RSA","key_bits":4096,"curve":null,"extensions":{"authorityKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","subjectKeyIdentifier":"75:84:D3:B5:5B:08:66:5D:F1:C1:7F:6F:66:96:89:6A:A9:F8:89:57","subjectAltName":"DNS:*.hetzner.de, DNS:hetzner.de","certificatePolicies":"Policy: 2.23.140.1.2.1\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.thawte.com\nCA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Sep 21 11:09:41.740 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:C9:82:CB:02:E7:C1:A1:60:75:BB:14:\n                85:92:3C:C4:2C:42:75:72:52:2D:62:14:CE:35:D5:20:\n                38:F4:1E:BE:A0:02:21:00:AC:53:19:18:54:01:11:2F:\n                A0:80:55:CC:86:89:36:F9:D9:B3:DC:D4:AD:C8:F5:6D:\n                E0:E4:58:62:37:52:2B:EA\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1:\n                BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66\n    Timestamp : Sep 21 11:09:41.786 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:BE:1F:6B:FD:C5:16:10:B3:F4:C6:8B:\n                43:64:0A:AC:44:12:81:32:4A:A1:A0:C5:EE:83:60:76:\n                D2:99:E2:34:E6:02:20:64:9E:51:D1:59:51:9E:D3:3D:\n                06:84:21:74:9E:6F:27:AB:FA:1B:83:F9:81:02:11:47:\n                AA:85:2E:21:F7:AD:0C\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Sep 21 11:09:41.866 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:C8:39:E5:49:D4:C4:C5:01:D8:FB:9C:\n                B7:BB:2E:AD:1E:F8:54:AD:A8:B9:86:CB:FB:06:A6:28:\n                AB:89:87:B9:04:02:21:00:B4:47:39:CB:58:46:F5:2B:\n                1A:E5:6B:56:04:37:3C:38:B2:AB:1C:DE:23:63:2D:A7:\n                5F:E8:41:B2:21:F2:D5:B1"},"pem":"-----BEGIN CERTIFICATE-----\nMIIHGjCCBgKgAwIBAgIQBjhhbwa6V5PwsLIVaFNHVjANBgkqhkiG9w0BAQsFADBe\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe\nFw0yNjA5MjEwMDAwMDBaFw0yNzA0MDcyMzU5NTlaMBcxFTATBgNVBAMMDCouaGV0\nem5lci5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMZxN2Pk/gud\nc102wFKqzbxUgkq1r7c5yCtVPy6RWiY3U511im/Rf3QjAjdPKIMuSamp3I74tG7W\nG8EfoB65OYerLpfzimuwNLQHo9+8mSNR0L1+eD/ql3vHf0kRIhY4iHjzFHbz8UWE\nwRSV7u81f3Tp1Ie4OqIVVYv+hrF0Kzf4G/shjhuKTT4ltz3Q0LDnysacTaUnPloD\nnxQufqy/udkz3+DgNIVwmU2CSV6MUCfcEv8nim6yvwwE6DC9gVYTwE6hN7X2a5Uc\nOkFncjgP4tOvXabsAk0Ekr8VlhXwD2Nf+NUs9R5IrWYwGPyCA1sH9avvWB22yniA\n8sKPW22WFEMkFXQmn9j26mBY9tEtVvHP63Tr2hUbJKe1ae9IMkaKWkmTwDeqSOSu\n5u1bOdF+ou3mVlxhIyU8UOQbeA2pBxToHhrSAsfcNWjOSt+dYcFMyJbpkuTgk9YE\nU8U2q8zUPqsMpU7/wCv90WoIUTxqXdd4f7vO9B+VO6T2hBuFIhEm0/CmqZCgvPCU\nxMsglXSiW6yzTAyxsDNXvH4dV9zE9WdiNBuOxQFdjP+v55zScU0Plam/vDV36cEt\nq/xj2yYo6rk6+Ja9dtmydSyauOG8jWI7IqrYWOa+FrT19Y8HgWSj9NnQFSgfNdnx\n36/xJEfbcFc5+B/7nf9uqTdhN8jCrff1AgMBAAGjggMZMIIDFTAfBgNVHSMEGDAW\ngBSljP4yzOsPLNQZxgi4ACSIXcPFtzAdBgNVHQ4EFgQUdYTTtVsIZl3xwX9vZpaJ\naqn4iVcwIwYDVR0RBBwwGoIMKi5oZXR6bmVyLmRlggpoZXR6bmVyLmRlMD4GA1Ud\nIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl\ncnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG\nCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jZHAudGhhd3RlLmNv\nbS9UaGF3dGVUTFNSU0FDQUcxLmNybDBwBggrBgEFBQcBAQRkMGIwJAYIKwYBBQUH\nMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6BggrBgEFBQcwAoYuaHR0cDov\nL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNydDAMBgNVHRMB\nAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwBMY9yY5Zwdq4j2Hoo9\n3q6Pq0SjN3tfm5TD+6Gc/MG+JgAAAaDDqEvsAAAEAwBIMEYCIQDJgssC58GhYHW7\nFIWSPMQsQnVyUi1iFM411SA49B6+oAIhAKxTGRhUAREvoIBVzIaJNvnZs9zUrcj1\nbeDkWGI3UivqAHYARMK9DOkUDmSlyUoBkwpaobs1lw4A7hEWiWgqHETXtWYAAAGg\nw6hMGgAABAMARzBFAiEAvh9r/cUWELP0xotDZAqsRBKBMkqhoMXug2B20pniNOYC\nIGSeUdFZUZ7TPQaEIXSebyer+huD+YECEUeqhS4h960MAHcAHJ9oLOn68EVpUPgb\nloqH3dsyENhM5siy44JSSsTPWZ8AAAGgw6hMagAABAMASDBGAiEAyDnlSdTExQHY\n+5y3uy6tHvhUrai5hsv7BqYoq4mHuQQCIQC0RznLWEb1Kxrla1YENzw4sqsc3iNj\nLadf6EGyIfLVsTANBgkqhkiG9w0BAQsFAAOCAQEACFnn52JW3FNkCKzY2oll8Swt\nb+ANyAAiYU4nYa0YzHQDOv52dtIwywFhK1MjDFh4b2Ux/dKhqwA0DqZ4wFQRStHI\n26Z3QrbD6imk3KLJqaB5nxWxxqxvCtLfCzs8z7viR7VKotRTxWM5l5jJcXChNTKv\nB38qTzzvmQSg6SpYdzSll2Y19r26BHq4p58gSlaxXR3U0ys1gkY4RlKqq6eHBUx1\nNvahSlgaHrPWrcQI5uDMyn1/NWsli4/0pGXRmVobNehIdduATv3jl+2200+GVKb2\nq4RcHju009fRQT+PofMWfsUTRhcboGftmIIFeGcIJmT/jrcqMHv5QfUBFWnyfA==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"090EE8C5DE5BFA62D2AE2FF7097C4857","version":3,"valid_from":"2017-11-02T12:24:25+00:00","valid_to":"2027-11-02T12:24:25+00:00","validity":"valid_period","days_remaining":362,"san":"","signature":"RSA-SHA256","sha256":"4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\nTYNYQI+BXG1R1cABlold\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"213.133.116.44","verified":true,"error":null}],"checked_at":"2026-11-04T12:28:12+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}