{"domain":"thg.com","port":443,"address":"140.248.137.91","resolved_addresses":["140.248.137.91","2a04:4e42:92::347"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"CN":"thg.com"},"issuer":{"C":"US","O":"Let's Encrypt","CN":"YR1"},"serial":"067B2A085704C86A5889156A0DBDE949987D","version":3,"valid_from":"2026-09-04T20:57:49+00:00","valid_to":"2026-12-03T20:57:48+00:00","validity":"valid_period","days_remaining":50,"san":"DNS:thg.com","signature":"RSA-SHA256","sha256":"1B:6A:8E:85:22:ED:6E:35:0F:83:DA:7A:C9:A2:8E:4D:3C:F8:3B:C7:1A:39:DC:98:56:71:9D:0D:18:9A:15:D1","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"keyUsage":"Digital Signature, Key Encipherment","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:FALSE","subjectKeyIdentifier":"B6:3B:6A:3B:DB:C2:F5:73:CA:65:DC:FD:8E:7D:C3:59:38:1D:CC:36","authorityKeyIdentifier":"1F:2F:35:BE:46:14:82:CD:40:B1:AE:79:2C:55:78:FA:F7:D4:68:FB","authorityInfoAccess":"CA Issuers - URI:http://yr1.i.lencr.org/","subjectAltName":"DNS:thg.com","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://yr1.c.lencr.org/126.crl\n","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:\n                C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD\n    Timestamp : Sep  4 21:56:19.718 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:47:99:0F:2C:8F:F4:28:C0:1A:27:A9:26:\n                D4:FA:14:99:98:AC:D8:20:26:95:62:E2:24:77:5A:DF:\n                E3:C7:23:DF:02:21:00:EE:0B:90:03:9A:A1:48:CC:F4:\n                FC:7F:C5:49:EC:24:2F:B8:36:4F:37:9B:F9:9A:0A:C2:\n                CF:FF:F3:38:30:07:5C\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:\n                1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A\n    Timestamp : Sep  4 21:56:20.032 2026 GMT\n    Extensions: 00:00:05:00:2D:BD:DF:3D\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:8B:7D:67:AB:EC:8F:28:62:D8:95:02:\n                96:5A:E4:A8:1E:3C:33:12:6C:F5:34:09:83:03:11:08:\n                35:E9:B3:70:EC:02:21:00:D9:3F:56:C3:5E:58:C4:2D:\n                66:02:0E:8E:9C:66:AE:A5:FB:75:DB:8C:4F:A4:97:65:\n                F8:6A:E8:E8:94:A0:B2:A6"},"pem":"-----BEGIN CERTIFICATE-----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\nDst3Yxx3e8+oTSBCHz0=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"Let's Encrypt","CN":"YR1"},"issuer":{"C":"US","O":"ISRG","CN":"Root YR"},"serial":"A20253F15F2691C05DC1CE13B9BCCA4E","version":3,"valid_from":"2025-09-03T00:00:00+00:00","valid_to":"2028-09-02T23:59:59+00:00","validity":"valid_period","days_remaining":689,"san":"","signature":"RSA-SHA256","sha256":"13:94:96:34:D9:9C:D6:FD:6A:A8:0B:C0:34:FE:FA:CC:EB:19:69:FE:EF:98:65:86:71:3E:CD:BB:05:75:8D:3F","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:TRUE, pathlen:0","subjectKeyIdentifier":"1F:2F:35:BE:46:14:82:CD:40:B1:AE:79:2C:55:78:FA:F7:D4:68:FB","authorityKeyIdentifier":"DE:E7:5B:60:D0:22:6D:40:28:7D:3F:0D:01:FE:A4:B5:52:B4:51:94","authorityInfoAccess":"CA Issuers - URI:http://yr.i.lencr.org/","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://yr.c.lencr.org/\n"},"pem":"-----BEGIN CERTIFICATE-----\nMIIE2zCCAsOgAwIBAgIRAKICU/FfJpHAXcHOE7m8yk4wDQYJKoZIhvcNAQELBQAw\nLjELMAkGA1UEBhMCVVMxDTALBgNVBAoTBElTUkcxEDAOBgNVBAMTB1Jvb3QgWVIw\nHhcNMjUwOTAzMDAwMDAwWhcNMjgwOTAyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEW\nMBQGA1UEChMNTGV0J3MgRW5jcnlwdDEMMAoGA1UEAxMDWVIxMIIBIjANBgkqhkiG\n9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVi8X2xCYgMXvJxNPKp/oF13UMgmPABB07VC\nLNDtoXmt9luEZNJSBV10VyT1Pz6LD8Zq1d2gc43WNl1AdRrj4sEnazbOiz0nPpmG\nBp2hui49oZtDIY6wdKeZAi5BbNU20CH6RSBBMLSQ9cXrH8dxdv4PAJ45ssGML68U\nSE3BsjC2a6cAN9L5CgXVIQi5tfNiTPoFZZ3S0OlXqLmmtdV95udWAb5b6e/F49Di\nCsH0Y00Ag72BVIb1hzynmKe+X0mERBTtsb3BwmpV9ipeBjMLoR/D9cHxHQCWoi5l\nTmXwY015J5rGelz1nZjJuxc2kioaX29XJBnhMkP531rSdG5uMwIDAQABo4HuMIHr\nMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDATASBgNVHRMBAf8E\nCDAGAQH/AgEAMB0GA1UdDgQWBBQfLzW+RhSCzUCxrnksVXj699Ro+zAfBgNVHSME\nGDAWgBTe51tg0CJtQCh9Pw0B/qS1UrRRlDAyBggrBgEFBQcBAQQmMCQwIgYIKwYB\nBQUHMAKGFmh0dHA6Ly95ci5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwB\nAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3lyLmMubGVuY3Iub3JnLzANBgkq\nhkiG9w0BAQsFAAOCAgEA0+zvMq3kHig1ddTmmm+RibTr9/RpX7k4buanMMRqbV/y\nIvP82zAHN3mvaw+cASuVsdpd0ikjhr4hnhJQLQOzOp2ccKrsdGOAgo0vddeISFAq\nEWEV4lmUM3vFF796up+bSgmJ1u6RupDCMxDgF8M3eLvGuj6L0lu3zkQ0KuQLnKxL\ntB0oQqn1Idg5CuuGpMvQzk29Pa3D/qHurc0EIM9SxukQuJqq63lxsYyRQFU8yMBO\nhq1w5LbfaWNRrz1uklOfI/pYkAb2E2MTZrAMQkBIE2S8Jt1F8gRc96o/xOsrgvSk\na84AisX6xq1lz1Z7jGvrnXc4TMcjxZTjiTaihcYI1JIXZiLtEMSCa5l3cu8YWd6z\ndLRQlqRdclVjuQfNHawRJ6GWlkK0QJosivTKwdBw3KxEtzGo8yMHERbsy57gP1UX\nHOMcmZYQC0gtyR3SxfenIM/MxC3Ia2Ypab/kQ/CTnlIn2KQ5JUC6NYrGCbhFN9bp\n5lKJStEwCUnLpntcrXk5XVDCNv/5RyWpRThkGOV7GetKkQ0qAY8hCzWK6oqnAhDZ\ncjlYVdWfqOw3DIOX6EDNBgAqHarRVxyF9QZdOaXSyPJ0ueD2BYJEBgaCGQ8rAaU/\nQc123V5LTXDZW4CcsPBDyhy4v+c8hClAyw/IkJlfBqxB9D+/wvIMHgECZ4ptP6o=\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"ISRG","CN":"Root YR"},"issuer":{"C":"US","O":"Internet Security Research Group","CN":"ISRG Root X1"},"serial":"F24B6D17F9D9AD7CB1C9FEA78782699F","version":3,"valid_from":"2026-05-13T00:00:00+00:00","valid_to":"2032-09-02T23:59:59+00:00","validity":"valid_period","days_remaining":2150,"san":"","signature":"RSA-SHA256","sha256":"07:26:39:D0:B1:40:D5:BF:FA:E1:6A:D9:C3:F6:CC:60:86:04:06:21:F5:1E:E6:1A:6D:46:A8:91:5C:07:CF:76","key_type":"RSA","key_bits":4096,"curve":null,"extensions":{"keyUsage":"Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication","basicConstraints":"CA:TRUE","subjectKeyIdentifier":"DE:E7:5B:60:D0:22:6D:40:28:7D:3F:0D:01:FE:A4:B5:52:B4:51:94","authorityKeyIdentifier":"79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E","authorityInfoAccess":"CA Issuers - URI:http://x1.i.lencr.org/","certificatePolicies":"Policy: 2.23.140.1.2.1","crlDistributionPoints":"Full Name:\n  URI:http://x1.c.lencr.org/\n"},"pem":"-----BEGIN CERTIFICATE-----\nMIIF9DCCA9ygAwIBAgIRAPJLbRf52a18scn+p4eCaZ8wDQYJKoZIhvcNAQELBQAw\nTzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh\ncmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjYwNTEzMDAwMDAw\nWhcNMzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQ\nMA4GA1UEAxMHUm9vdCBZUjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB\nANvGJnN78CTJdWL3+eGfsLN5TrNBJs+VH9hRXqRbwxu9sGNiB0BD1fcOxbSUQCJI\nM1xE13Db+5Cw1w0s0EBYsvuIP/6joF0w8cuImbgR1OGgYbSQ4OpzI+DG8SGuTlcE\n873OCS+kh3srlo6vl43M5OJg4Aeo1sfHp6kTJDoIiFBNJAY+OKfX/FUvYKuhjT+n\no49lmqmupSBI5PkBQiqrEGtWU5uxU/cQWHGu8jSjFBznZqvbNPLMXMLFxCb3WTfr\nJBXXjqvWG+v4bjzxjjeAtOlU7qarRDvNOyAuQYLln904M+faKx8hnLCpJ15ZqaEg\ncNlY+9MMWcC5yvL2A2j3l9+2buggZX+dOE91zYmIdawTvSZuVvlbRrAlLxIB6pwM\nBjneXCjYQ8+3BCCjssbSNpZU3hTcBDdhfAlEDlYr6pEatnMdmDT5BqnKC92bd0Eh\nM1fbLHioLccLCuievT8ZkPhZrq7Mii7gNXAcUEAR8+lzYal+9zTg7C5DALyVOeG/\nCqfRAMn1KSHCR0NSA6P8tn/mGRlnCct5rtVCLnVySVpU6H1qGg3DgTOuskf8eahT\nMiYbI5ezPJmO5ertalskQ1utp74+eDy92PI4ftHKTbq9IWhH4YZKh3WnJEIt+oQv\nlYZbY8tpEroKrFB6PFGzrJIDRyts4HqvuH52RFj2zv/BAgMBAAGjgeswgegwDgYD\nVR0PAQH/BAQDAgEGMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQFMAMB\nAf8wHQYDVR0OBBYEFN7nW2DQIm1AKH0/DQH+pLVStFGUMB8GA1UdIwQYMBaAFHm0\nWeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYW\naHR0cDovL3gxLmkubGVuY3Iub3JnLzATBgNVHSAEDDAKMAgGBmeBDAECATAnBgNV\nHR8EIDAeMBygGqAYhhZodHRwOi8veDEuYy5sZW5jci5vcmcvMA0GCSqGSIb3DQEB\nCwUAA4ICAQA8spSI95KKfn2W6GMmDpHBJSPaLbsS3W93cijJCRCYAc1fsJgL1FIL\n7C0C9ecPOdcwB2fi0Dk2p94j9iTJCxmt5CFSKLRWwnXT2MMSXexVxqoVB79BdWPx\nVXETkVme/qYSAuKVHh5Ps+5BixgmwS1JkjSAc+MfrUbNssVEEnH0aEiAh+rotXAV\nJSP/Ye7LJPEwD9DWG72vVWbhAcuOf5OLjz57Ctk7MgQHynZ7+PlHJtajroCaIbtC\nr6tcZZaAwUQm+jQyeWdV+2hv9deOYFmKeQyjjcSrN5Nadrw+L9DZJLbA1HqeNvLh\nBgqpP0fvJq2N6EtD574N6eMI7uMsJTnji2UDz9el5XLSv9fqJMuDQtYVb2oTNoKp\noUqhxPVC0aq4eG5MESaIdn8b5ZGSSeAJLMHXljEdlNza+ncfkviXk1POLnnFdvx8\n/gk6M374WbLWFXw8N141B/Rl/tINGfl1TxOIiqtiMYkL02RSGb1kq34BL9NPP27z\nRGMuHGnzS3hFIrRTfKxrzUZ9RzQWzEG3K6fJ3r2nqSltkeytis9DIBoFY9VmVyjL\nM71DMi+y1+TRSJVClEMwvA4yL++7q9XZx5r5wBRWB4kQTKH5qyoZnDw7iiuh1lID\nyDFx8r7i9vIJU5HS3moZLkYWAOilMaV9N56A9Bgb6dNcHkvg3NoaYA==\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","cipher_bits":128,"warnings":[],"attempts":[{"address":"140.248.137.91","verified":true,"error":null}],"checked_at":"2026-10-14T01:58:24+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}