{"domain":"lfait.com","port":443,"address":"172.66.40.150","resolved_addresses":["172.66.40.150","172.66.43.106","2606:4700:3108::ac42:2896","2606:4700:3108::ac42:2b6a"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"lfait.com"},"issuer":{"C":"US","O":"Google Trust Services","CN":"WE1"},"serial":"E60E26EEFF1DAB33132CE293E8D085E5","version":3,"valid_from":"2026-11-05T15:43:24+00:00","valid_to":"2027-02-03T16:42:35+00:00","validity":"valid_period","days_remaining":89,"san":"DNS:lfait.com, DNS:*.lfait.com, DNS:haproxy.lfait.com, DNS:x.lfait.com","signature":"ecdsa-with-SHA256","sha256":"8F:B6:01:53:03:6F:AC:38:BB:66:EC:23:5E:B2:33:FB:2C:D8:93:62:94:BD:8D:9F:DA:DC:5E:E2:6B:F9:54:EE","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"keyUsage":"Digital Signature","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:FALSE","subjectKeyIdentifier":"F7:BA:59:B5:EB:3E:B2:FE:E7:35:3E:6E:D4:D1:10:B5:61:D7:FF:CD","authorityKeyIdentifier":"90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38","authorityInfoAccess":"CA Issuers - URI:http://i.pki.goog/we1.crt","subjectAltName":"DNS:lfait.com, DNS:*.lfait.com, DNS:haproxy.lfait.com, DNS:x.lfait.com","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://c.pki.goog/we1/PFx_4eMwQ08.crl\n","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Nov  5 16:43:25.266 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:A2:D6:23:F5:8A:E6:46:C2:DE:E4:0B:\n                70:95:BB:B0:F9:32:9A:5C:E1:2F:99:6D:86:A3:6A:42:\n                5E:2B:F8:8F:1D:02:20:00:C1:04:30:22:DF:F0:8F:72:\n                D3:E4:44:3C:8B:84:B3:02:9C:21:CB:C1:87:82:13:44:\n                02:1D:40:DC:5B:03:03\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90:\n                4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59\n    Timestamp : Nov  5 16:43:25.444 2026 GMT\n    Extensions: 00:00:05:00:1D:2A:63:5F\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:06:64:15:EF:A1:AE:8A:47:B4:96:03:3C:\n                FE:3A:47:D9:7A:EF:BB:49:99:D1:B8:A4:67:4C:0B:13:\n                F3:BA:67:53:02:20:00:CE:07:92:FB:B2:BC:6B:95:BD:\n                70:0A:B5:FA:1D:48:BA:B5:4A:28:3F:0E:1A:68:D8:28:\n                80:74:92:32:C6:A7"},"pem":"-----BEGIN CERTIFICATE-----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\n8FbLKOi2GIBzqq0plogxN8E=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"Google Trust Services","CN":"WE1"},"issuer":{"C":"US","O":"Google Trust Services LLC","CN":"GTS Root R4"},"serial":"7FF31977972C224A76155D13B6D685E3","version":3,"valid_from":"2023-12-13T09:00:00+00:00","valid_to":"2029-02-20T14:00:00+00:00","validity":"valid_period","days_remaining":837,"san":"","signature":"ecdsa-with-SHA384","sha256":"1D:FC:16:05:FB:AD:35:8D:8B:C8:44:F7:6D:15:20:3F:AC:9C:A5:C1:A7:9F:D4:85:7F:FA:F2:86:4F:BE:BF:96","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","subjectKeyIdentifier":"90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38","authorityKeyIdentifier":"80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C","authorityInfoAccess":"CA Issuers - URI:http://i.pki.goog/r4.crt","crlDistributionPoints":"Full Name:\n  URI:http://c.pki.goog/r/r4.crl\n","certificatePolicies":"Policy: 2.23.140.1.2.1"},"pem":"-----BEGIN CERTIFICATE-----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\n7uJW\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"Google Trust Services LLC","CN":"GTS Root R4"},"issuer":{"C":"BE","O":"GlobalSign nv-sa","OU":"Root CA","CN":"GlobalSign Root CA"},"serial":"7FE530BF331343BEDD821610493D8A1B","version":3,"valid_from":"2023-11-15T03:43:21+00:00","valid_to":"2028-01-28T00:00:42+00:00","validity":"valid_period","days_remaining":448,"san":"","signature":"RSA-SHA256","sha256":"76:B2:7B:80:A5:80:27:DC:3C:F1:DA:68:DA:C1:70:10:ED:93:99:7D:0B:60:3E:2F:AD:BE:85:01:24:93:B5:A7","key_type":"EC","key_bits":384,"curve":"secp384r1","extensions":{"keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE","subjectKeyIdentifier":"80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C","authorityKeyIdentifier":"60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B","authorityInfoAccess":"CA Issuers - URI:http://i.pki.goog/gsr1.crt","crlDistributionPoints":"Full Name:\n  URI:http://c.pki.goog/r/gsr1.crl\n","certificatePolicies":"Policy: 2.23.140.1.2.1"},"pem":"-----BEGIN CERTIFICATE-----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\nvepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"172.66.40.150","verified":true,"error":null}],"checked_at":"2026-11-05T21:36:37+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}