{"domain":"mail2.nationmark.com","port":443,"address":"202.53.128.161","resolved_addresses":["202.53.128.161"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"HK","L":"Kwun Tong","O":"Nationmark Service Centre Ltd.","CN":"mail2.nationmark.com"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"serial":"098816F6A074CF950FF96C00D3D0E523","version":3,"valid_from":"2025-12-15T00:00:00+00:00","valid_to":"2027-01-15T23:59:59+00:00","validity":"valid_period","days_remaining":65,"san":"DNS:mail2.nationmark.com","signature":"RSA-SHA256","sha256":"75:27:69:0C:38:40:3D:1D:68:42:B3:DC:1F:64:03:E2:4D:60:CC:ED:2B:B9:7D:57:26:05:C0:87:BF:A6:0F:E6","key_type":"RSA","key_bits":3072,"curve":null,"extensions":{"authorityKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","subjectKeyIdentifier":"68:51:E5:67:86:D2:B0:E0:3E:EC:6D:2E:2B:09:4A:9A:21:5F:4C:7F","subjectAltName":"DNS:mail2.nationmark.com","certificatePolicies":"Policy: 2.23.140.1.2.2\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.thawte.com\nCA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Dec 15 03:07:21.057 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:4C:1A:44:BF:70:84:E2:59:70:D3:E1:30:\n                EC:BB:66:57:7C:7B:52:BA:EE:DA:96:27:6F:30:AF:D2:\n                3F:E5:FF:42:02:20:27:9D:92:A2:82:B0:A7:DE:DB:40:\n                CE:6B:AD:8E:CD:7F:0A:4B:91:8C:56:9D:9C:E6:6A:59:\n                D6:E5:65:F5:9F:B7\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Dec 15 03:07:21.733 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:15:06:D4:55:1B:E4:63:02:C8:08:1F:17:\n                30:DE:4C:75:C6:2F:44:C4:82:79:2E:AF:D6:09:CA:7D:\n                F7:63:C8:FD:02:20:44:3E:83:DE:01:0C:6D:9F:81:D5:\n                F2:29:5B:FE:A2:69:1E:48:EE:CA:0F:A9:14:41:7D:5F:\n                2E:C1:56:F2:73:AB\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99:\n                EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9\n    Timestamp : Dec 15 03:07:21.299 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:A7:46:54:1E:D9:80:0A:B0:6C:83:74:\n                16:53:26:30:8E:59:97:00:00:35:39:06:C9:5E:65:6F:\n                A6:04:03:55:80:02:21:00:C5:DA:3D:EE:6C:89:8F:63:\n                44:01:8F:5F:B0:22:93:6A:22:F5:DE:BE:74:32:3C:C7:\n                53:75:2E:49:25:64:9E:59"},"pem":"-----BEGIN CERTIFICATE-----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\n4TOZASxKQOAN3uXcr4TDKPfVQTRiNanWwOxoUcRy8A==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS RSA CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"090EE8C5DE5BFA62D2AE2FF7097C4857","version":3,"valid_from":"2017-11-02T12:24:25+00:00","valid_to":"2027-11-02T12:24:25+00:00","validity":"valid_period","days_remaining":355,"san":"","signature":"RSA-SHA256","sha256":"4B:CC:5E:23:4F:E8:1E:DE:4E:AF:88:3A:A1:9C:31:33:5B:0B:26:E8:5E:06:6B:99:45:E4:CB:61:53:EB:20:C2","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"subjectKeyIdentifier":"A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\nTYNYQI+BXG1R1cABlold\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"202.53.128.161","verified":true,"error":null}],"checked_at":"2026-11-11T21:21:26+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}