{"domain":"lightlayer.net","port":443,"address":"207.244.131.22","resolved_addresses":["207.244.131.22"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"*.lightlayer.net"},"issuer":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication CA DV R36"},"serial":"8CD8A3892F80F18EA9D016364824A02A","version":3,"valid_from":"2026-03-31T00:00:00+00:00","valid_to":"2026-10-15T23:59:59+00:00","validity":"expiring_soon","days_remaining":22,"san":"DNS:*.lightlayer.net, DNS:lightlayer.net","signature":"RSA-SHA256","sha256":"FE:4D:29:ED:FF:38:DE:D7:B3:AB:D2:CF:64:14:D0:AA:4C:34:81:5D:E5:E3:2E:B0:1C:52:C8:F1:50:99:08:BE","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"authorityKeyIdentifier":"68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27","subjectKeyIdentifier":"DF:E5:81:95:1E:FF:F0:C3:B9:D9:3C:C8:74:2D:05:17:87:05:25:5D","keyUsage":"Digital Signature, Key Encipherment","basicConstraints":"CA:FALSE","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","certificatePolicies":"Policy: 1.3.6.1.4.1.6449.1.2.2.7\n  CPS: https://sectigo.com/CPS\nPolicy: 2.23.140.1.2.1","authorityInfoAccess":"CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt\nOCSP - URI:http://ocsp.sectigo.com","subjectAltName":"DNS:*.lightlayer.net, DNS:lightlayer.net","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n    Timestamp : Mar 31 07:39:04.723 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:AA:8A:CD:C1:27:1C:99:D7:0B:E4:7F:\n                A4:FD:4B:18:BB:3B:2B:77:2A:87:92:41:2F:79:AD:3A:\n                C7:1F:F5:CD:4B:02:21:00:87:68:74:C3:1D:3B:30:11:\n                4F:56:D0:4D:55:6C:D0:D9:BD:EC:A8:EB:2A:C5:F4:AB:\n                52:BF:7C:48:DE:46:2B:0D\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:\n                E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A\n    Timestamp : Mar 31 07:39:04.797 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:30:D2:23:D4:43:AD:F5:32:0F:3F:68:94:\n                4C:73:BB:B6:B6:C5:F1:B9:1E:DD:A4:1E:D5:2A:91:DB:\n                25:BC:88:E9:02:20:26:41:65:CA:09:3B:AA:87:B2:CF:\n                F6:0A:F8:A6:3B:38:CD:B8:85:BB:D6:F3:AB:DB:0F:B6:\n                20:F0:13:17:45:33\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:\n                1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A\n    Timestamp : Mar 31 07:39:05.151 2026 GMT\n    Extensions: 00:00:05:00:05:11:C0:D4\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:57:19:14:C7:B0:AC:99:FF:EB:48:88:0F:\n                F6:CA:5D:73:00:5F:7F:27:5C:43:B8:76:B8:04:B0:34:\n                8E:FE:98:85:02:20:4B:C8:DC:48:70:5B:D6:9E:E2:58:\n                50:6A:E8:45:A0:0F:6C:AC:C9:A9:9F:4E:F1:19:8D:FA:\n                74:42:D2:BA:6A:31"},"pem":"-----BEGIN CERTIFICATE-----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\nStpAgCE=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication CA DV R36"},"issuer":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication Root R46"},"serial":"397A66CC2756362E0DAA87CA6EABE3B1","version":3,"valid_from":"2021-03-22T00:00:00+00:00","valid_to":"2036-03-21T23:59:59+00:00","validity":"valid_period","days_remaining":3467,"san":"","signature":"RSA-SHA384","sha256":"8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0","key_type":"RSA","key_bits":3072,"curve":null,"extensions":{"authorityKeyIdentifier":"56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49","subjectKeyIdentifier":"68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","basicConstraints":"CA:TRUE, pathlen:0","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","certificatePolicies":"Policy: X509v3 Any Policy\nPolicy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl\n","authorityInfoAccess":"CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c\nOCSP - URI:http://ocsp.sectigo.com"},"pem":"-----BEGIN CERTIFICATE-----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\nJEltkYnTAH41QJ6SAWO66GrrUESwN/cgZzL4JLEqz1Y=\n-----END CERTIFICATE-----\n"},{"subject":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo Public Server Authentication Root R46"},"issuer":{"C":"US","ST":"New Jersey","L":"Jersey City","O":"The USERTRUST Network","CN":"USERTrust RSA Certification Authority"},"serial":"D27FBBC1DE359E5216AD6149586099C4","version":3,"valid_from":"2021-03-22T00:00:00+00:00","valid_to":"2038-01-18T23:59:59+00:00","validity":"valid_period","days_remaining":4135,"san":"","signature":"RSA-SHA384","sha256":"92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5","key_type":"RSA","key_bits":4096,"curve":null,"extensions":{"authorityKeyIdentifier":"53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB","subjectKeyIdentifier":"56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","basicConstraints":"CA:TRUE","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","certificatePolicies":"Policy: X509v3 Any Policy","crlDistributionPoints":"Full Name:\n  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl\n","authorityInfoAccess":"OCSP - URI:http://ocsp.usertrust.com"},"pem":"-----BEGIN CERTIFICATE-----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\nRnnyp58XRStJ\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":["The certificate expires within 30 days."],"attempts":[{"address":"207.244.131.22","verified":true,"error":null}],"checked_at":"2026-09-23T13:22:52+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}