{"domain":"tui.com","port":443,"address":"104.126.37.144","resolved_addresses":["104.126.37.144","2a02:26f0:3500:18::1724:a284"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"DE","L":"Hannover","O":"TUI AG","CN":"www.tui.com"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS ECC CA G1"},"serial":"0F6B580209AA4DD878D90287B3926ECB","version":3,"valid_from":"2026-02-11T00:00:00+00:00","valid_to":"2027-02-10T23:59:59+00:00","validity":"valid_period","days_remaining":110,"san":"DNS:www.tui.com, DNS:tui.com","signature":"ecdsa-with-SHA256","sha256":"17:6D:39:3B:D0:83:79:93:5B:D6:9B:20:64:6C:9B:25:D4:8D:6F:6D:CD:60:93:9F:18:91:AB:DB:5D:01:51:80","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"authorityKeyIdentifier":"26:34:51:EA:29:9D:88:A2:7F:DB:58:11:3D:CA:1B:1E:2A:9C:B4:E1","subjectKeyIdentifier":"C8:7F:6E:A8:CE:00:BC:8B:0E:B9:A1:3E:F2:8C:0E:4F:28:59:8A:11","subjectAltName":"DNS:www.tui.com, DNS:tui.com","certificatePolicies":"Policy: 2.23.140.1.2.2\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Agreement","extendedKeyUsage":"TLS Web Server Authentication","crlDistributionPoints":"Full Name:\n  URI:http://cdp.thawte.com/ThawteTLSECCCAG1.crl\n","authorityInfoAccess":"OCSP - URI:http://status.thawte.com\nCA Issuers - URI:http://cacerts.thawte.com/ThawteTLSECCCAG1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Feb 11 10:31:23.685 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:CF:54:9D:F3:E3:E6:B3:52:79:01:90:\n                3B:5D:D4:3B:9B:AF:DE:0C:2C:58:45:D0:D2:0C:A0:CD:\n                29:BA:50:0F:DE:02:20:46:82:10:13:04:F7:BC:97:C1:\n                77:D6:19:9A:27:08:0C:05:0E:2C:57:E9:18:2F:00:E0:\n                45:25:C0:DD:5C:39:AA\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Feb 11 10:31:23.686 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:7A:B3:DA:AB:8F:FB:4B:30:28:D8:14:39:\n                50:73:3E:09:9C:EB:45:70:B0:45:52:53:F7:9E:D9:25:\n                15:58:B7:4C:02:21:00:D3:BA:99:E2:87:F6:CC:18:6E:\n                D2:A1:8D:95:B7:A7:48:55:9C:C6:43:31:BA:79:37:FA:\n                9C:1E:BD:9D:B0:B3:5F\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46:\n                FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8\n    Timestamp : Feb 11 10:31:23.773 2026 GMT\n    Extensions: 00:00:05:00:02:99:3C:01\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:80:A4:7B:2D:84:F5:28:16:42:05:71:\n                F5:96:58:2A:68:D9:2F:A7:CB:4E:88:A8:71:13:8E:EF:\n                9B:42:BC:3E:5A:02:21:00:F0:B1:B3:4E:B2:7A:76:0E:\n                31:40:9E:A0:09:71:79:F1:F1:BA:15:FB:30:D6:9B:5D:\n                15:3E:39:CB:5A:7D:CC:CC"},"pem":"-----BEGIN CERTIFICATE-----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\n+WM40KLevVtqdQ==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"Thawte TLS ECC CA G1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G3"},"serial":"044C95221A9F6620D6C804DB2E284839","version":3,"valid_from":"2017-11-02T12:59:51+00:00","valid_to":"2027-11-02T12:59:51+00:00","validity":"valid_period","days_remaining":374,"san":"","signature":"ecdsa-with-SHA256","sha256":"AE:82:20:1F:56:5E:04:39:B7:F4:AD:68:93:27:59:4E:B9:74:A4:F7:81:B1:A6:CB:FE:D5:9B:D3:82:31:7F:13","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"subjectKeyIdentifier":"26:34:51:EA:29:9D:88:A2:7F:DB:58:11:3D:CA:1B:1E:2A:9C:B4:E1","authorityKeyIdentifier":"B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","basicConstraints":"CA:TRUE, pathlen:0","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl\n","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS"},"pem":"-----BEGIN CERTIFICATE-----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\n30Xl5y+iXkdFN4P5w5VhABbSWAIDGEjaVxvret/ZKPeqew0B\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G3"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G3"},"serial":"055556BCF25EA43535C3A40FD5AB4572","version":3,"valid_from":"2013-08-01T12:00:00+00:00","valid_to":"2038-01-15T12:00:00+00:00","validity":"valid_period","days_remaining":4101,"san":"","signature":"ecdsa-with-SHA384","sha256":"31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0","key_type":"EC","key_bits":384,"curve":"secp384r1","extensions":{"basicConstraints":"CA:TRUE","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","subjectKeyIdentifier":"B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6"},"pem":"-----BEGIN CERTIFICATE-----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\nsycX\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"104.126.37.144","verified":true,"error":null}],"checked_at":"2026-10-23T22:34:56+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}