SSL certificate
TLSv1.2didiglobal.com · 117.51.1.5:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=CN ST=北京市 O=Beijing Didi Infinity Technology and Development Co., Ltd. CN=didiglobal.com
- Issuer
- C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
- Valid from
- 2026-09-20T00:00:00+00:00
- Expires
- 2027-04-06T23:59:59+00:00
- Days remaining
- 176
- Serial (hex)
- 02E9AB2E13DE24C9193A259C2C4FF631
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:didiglobal.com, DNS:*.99app.com, DNS:*.99food.com, DNS:*.99pay.com.br, DNS:*.99taxis.mobi, DNS:*.data.intra.didiglobal.com, DNS:*.dd.me, DNS:*.didiglobal.com, DNS:*.didipay.didiglobal.com, DNS:*.intra.99taxis.mobi, DNS:*.intra.didiglobal.com, DNS:99app.com, DNS:99food.com, DNS:dd.me, DNS:notebook.bigdata.intra.didiglobal.com, DNS:www.didiglobal.com
SHA-256 fingerprint
C2:10:A8:88:EF:B5:48:43:CD:15:AC:FA:E2:C4:BD:54:CE:5B:85:1E:77:C6:DA:43:AA:34:46:4F:2B:CE:E5:72
Certificate extensions & PEM
- authorityKeyIdentifier
- 41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
- subjectKeyIdentifier
- 75:4A:BB:45:AD:5A:30:C7:24:92:6D:23:C7:6D:6D:D9:84:46:10:6B
- subjectAltName
- DNS:didiglobal.com, DNS:*.99app.com, DNS:*.99food.com, DNS:*.99pay.com.br, DNS:*.99taxis.mobi, DNS:*.data.intra.didiglobal.com, DNS:*.dd.me, DNS:*.didiglobal.com, DNS:*.didipay.didiglobal.com, DNS:*.intra.99taxis.mobi, DNS:*.intra.didiglobal.com, DNS:99app.com, DNS:99food.com, DNS:dd.me, DNS:notebook.bigdata.intra.didiglobal.com, DNS:www.didiglobal.com
- certificatePolicies
- Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/GeoTrustG2TLSCNRSA4096SHA2562022CA1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 20 08:28:28.025 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:95:D8:55:F4:AC:A0:36:AD:11:0F:9A: 88:8A:8B:09:1D:2A:91:7C:E2:B9:E5:9F:E3:28:E7:84: 9A:15:6A:E7:24:02:21:00:DA:78:A2:61:93:FA:AE:FD: DA:60:0A:5D:80:9D:84:F7:27:9D:50:EF:3D:EC:B7:11: 39:50:63:8F:93:44:59:A5 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Sep 20 08:28:28.084 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:81:F3:5D:31:1A:A1:E5:E7:F9:66:2C: 2F:C5:E3:4C:02:AA:AE:D2:89:30:AF:E8:4B:EF:AF:37: 52:6B:46:45:A8:02:20:0C:43:8B:0B:1C:D7:AB:4E:C1: D6:61:62:EA:5B:56:D2:6F:52:5A:C9:8F:16:FF:30:83: 9E:0A:A0:B6:1F:7E:54 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 20 08:28:28.109 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:08:F4:80:B0:C2:E5:59:71:1C:68:08:7E: DF:E3:2E:76:AF:73:B2:E4:66:E7:A6:D6:03:A4:53:59: 74:6F:2A:29:02:20:2A:F9:54:47:35:CF:8C:B1:7F:11: E9:7B:92:83:4F:B8:FA:9B:1A:55:04:53:CB:56:B6:AE: 84:64:48:39:3D:6C
-----BEGIN CERTIFICATE----- MIIIqzCCBpOgAwIBAgIQAumrLhPeJMkZOiWcLE/2MTANBgkqhkiG9w0BAQsFADBb MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xMzAxBgNVBAMT Kkdlb1RydXN0IEcyIFRMUyBDTiBSU0E0MDk2IFNIQTI1NiAyMDIyIENBMTAeFw0y NjA5MjAwMDAwMDBaFw0yNzA0MDYyMzU5NTlaMH8xCzAJBgNVBAYTAkNOMRIwEAYD VQQIDAnljJfkuqzluIIxQzBBBgNVBAoTOkJlaWppbmcgRGlkaSBJbmZpbml0eSBU ZWNobm9sb2d5IGFuZCBEZXZlbG9wbWVudCBDby4sIEx0ZC4xFzAVBgNVBAMTDmRp ZGlnbG9iYWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzitv L331Z1Sgh0EjntkKCZrcUWf1Rz70quEZPm8vP1d2HG4wedqJ4YeAcMxQPgm9qQSY c3qi2NS8fgMF6+te9FKQIRQ27Y7Uc4xtnFX9AI4R0t5EE4+BirLC1beQchhT7gLZ QRS+fZJIySHKROZGY6WUFbOpCmbBtfoqG8Swdherl14HQ6ZOUG8areMHO9uzWEV6 S5in3313nZQhMVGPa+UsZB6d7UthrAR8sO4lwYpncGUh/Ff4fe3L7pB42VDrN1ok RfOn6Ksydf0YWxnRnqlhUSH6QBMDSqivwyu7NYoMRelNF+xcQeSACGqpfuVjYGqj 1GBsCkq0bhBJuLscmwIDAQABo4IERTCCBEEwHwYDVR0jBBgwFoAUQU6OaZ30biXs eBQcftfNHZnP+WswHQYDVR0OBBYEFHVKu0WtWjDHJJJtI8dtbdmERhBrMIIBMQYD VR0RBIIBKDCCASSCDmRpZGlnbG9iYWwuY29tggsqLjk5YXBwLmNvbYIMKi45OWZv b2QuY29tgg4qLjk5cGF5LmNvbS5icoIOKi45OXRheGlzLm1vYmmCGyouZGF0YS5p bnRyYS5kaWRpZ2xvYmFsLmNvbYIHKi5kZC5tZYIQKi5kaWRpZ2xvYmFsLmNvbYIY Ki5kaWRpcGF5LmRpZGlnbG9iYWwuY29tghQqLmludHJhLjk5dGF4aXMubW9iaYIW Ki5pbnRyYS5kaWRpZ2xvYmFsLmNvbYIJOTlhcHAuY29tggo5OWZvb2QuY29tggVk ZC5tZYIlbm90ZWJvb2suYmlnZGF0YS5pbnRyYS5kaWRpZ2xvYmFsLmNvbYISd3d3 LmRpZGlnbG9iYWwuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAw EwYDVR0lBAwwCgYIKwYBBQUHAwEwTwYDVR0fBEgwRjBEoEKgQIY+aHR0cDovL2Ny bC5kaWdpY2VydC5jbi9HZW9UcnVzdEcyVExTQ05SU0E0MDk2U0hBMjU2MjAyMkNB MS5jcmwwgYMGCCsGAQUFBwEBBHcwdTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au ZGlnaWNlcnQuY24wTgYIKwYBBQUHMAKGQmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0 LmNuL0dlb1RydXN0RzJUTFNDTlJTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNV HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwBMY9yY5Zwdq4j2 Hoo93q6Pq0SjN3tfm5TD+6Gc/MG+JgAAAaC97lP5AAAEAwBIMEYCIQCV2FX0rKA2 rREPmoiKiwkdKpF84rnln+Mo54SaFWrnJAIhANp4omGT+q792mAKXYCdhPcnnVDv Pey3ETlQY4+TRFmlAHYARMK9DOkUDmSlyUoBkwpaobs1lw4A7hEWiWgqHETXtWYA AAGgve5UNAAABAMARzBFAiEAgfNdMRqh5ef5ZiwvxeNMAqqu0okwr+hL7683UmtG RagCIAxDiwsc16tOwdZhYupbVtJvUlrJjxb/MIOeCqC2H35UAHUAHJ9oLOn68EVp UPgbloqH3dsyENhM5siy44JSSsTPWZ8AAAGgve5UTQAABAMARjBEAiAI9ICwwuVZ cRxoCH7f4y52r3Oy5GbnptYDpFNZdG8qKQIgKvlURzXPjLF/Eel7koNPuPqbGlUE U8tWtq6EZEg5PWwwDQYJKoZIhvcNAQELBQADggIBAEIpReE7WN7A8HELXtFs7Hpc HQPI/zMB34KfjKPSqrVHV/dxPFkITGLWOpyvhb4qNIEyfr71/A6cAGI72Rd+eRES s7Whpc2fTYW7rERWOF25sw25T/h41QILVpiYErI22wWpyWdIDTs+UxPUGkh2oHAD 5afv9KtPEjqDfXgI39k8504vov7zW1YkjMEks872lEHJq8pU6f0FY5ajSKj4xOTc XsG8RV64OTjA182/bIAbPQN57Z/xD+YvBM8dKDcrXJkHTro4lilGnvYUdhhINJ6k nGlI43XLTNgLU58M0orZ0z5J5RVe+hAXztH5ilfbf0L+2RzrDxwlJVP/wFBf6jhi d5DUiHKg7GYKMz6zZ9cymqtslkPhcupX7AD0leWEKH9NL5PVm0t0iyulNdxcRQaO /g1pj2fpqR75TVBwp6DrCQLuyxN2Ux+dF+TeFNwF8BUpQTp5zDEN0apq+/2TqYfZ aUqHHvrTUPqnkFvlSuhmZM9qsHljJ/tUe2+qZ0VAXD1KcXNpJHHnufTTxIeRpH6Q c6DBFgezgfjoxpPdfFbl+AjPP/IPq1NxMsAiEj5dZK8FfF2Wbw6tDia7R0foLnqK 1WTZY+V6B30NlPwEJ5wXom+CsH0VBdrsOE9U2kux6cQw+iBwwsD9n5NoQNJQ+ark ElKycGh6lvcovRcZzSMR -----END CERTIFICATE-----
Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-12T04:51:51+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=DigiCert, Inc. CN=GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Valid from
- 2022-12-15T00:00:00+00:00
- Expires
- 2032-12-14T23:59:59+00:00
- Days remaining
- 2255
- Serial (hex)
- 0F06BB09306148267FCA1B71C1DB807D
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
05:DC:9E:DC:0F:DD:FA:97:5A:14:32:EF:80:6E:C7:80:07:8B:53:62:AD:45:AF:76:DB:15:C9:07:63:0D:B2:5D
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- subjectKeyIdentifier
- 41:4E:8E:69:9D:F4:6E:25:EC:78:14:1C:7E:D7:CD:1D:99:CF:F9:6B
- authorityKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootG2.crt
- crlDistributionPoints
- Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootG2.crl
- certificatePolicies
- Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIQDwa7CTBhSCZ/yhtxwduAfTANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0yMjEyMTUwMDAwMDBaFw0zMjEyMTQyMzU5NTlaMFsxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjEzMDEGA1UEAxMqR2VvVHJ1c3QgRzIg VExTIENOIFJTQTQwOTYgU0hBMjU2IDIwMjIgQ0ExMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAn1dxOo4OzYa4O1EJd0nhFI5QB/kXAJTHRI6C1J2Gz86B Ge9+DD8R4vexG7/QnUvV+5887o+G4enlkDwJV1Pehq4i0n+X6VKIPg5cThCx6/o0 3bUkLWld7slhi3Hli/MaosZZuytdU1uCzQlGpaLB2TiTZbDImiVaykdfwl8V6AXP 0Ab4wIcvPggl4qlwyPsBY6NODbP884BmL1ntdXfzecGst30FnAtm4w+PTo0I1T3F ITYXaNuIJnKonD1xXaN4Ar/rvcpKpntxVyZQ2T1Lb7vlfYISqNF+1ugpTzKnI1z7 xV7tSqXd2vs6Csy6yFN+QLWwMnGWuQkvrO1m+F7V85S9ECpbqn9qNtKl8gIQ7JeZ BmBdLroW+4j1PDzBWmSWKB+gvRubVSTuoDR3VCtlI4G/Uh+ObF4UStbhKjr1SNCW JcrB1oF+wWBl8Bvozm4xflyyGDY47KCP/Fn9X5GHDNLQA9R0zqDKRumipp1UXswF uzH0I+gOuqSdZSsYID9XSVq6adcJ3rIMAcTuODcrPrJssOFKGFUbmY/VxbxMgYHI /07Zfdxoa+q0osWpofbMhLPZz9UuJFBCLsjgSckkSU02/4itmLm9e3lt6E/4q9Mc MCaS8+qrLWKG9wQtviC8zGynEXpxjEQE8WyrfeYKyXwZFCPB4rpTw1joJmGFeLUC AwEAAaOCAX4wggF6MBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFEFOjmmd 9G4l7HgUHH7XzR2Zz/lrMB8GA1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485 MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw dAYIKwYBBQUHAQEEaDBmMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5kaWdpY2Vy dC5jbjA/BggrBgEFBQcwAoYzaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY24vRGln aUNlcnRHbG9iYWxSb290RzIuY3J0MEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9j cmwuZGlnaWNlcnQuY24vRGlnaUNlcnRHbG9iYWxSb290RzIuY3JsMD0GA1UdIAQ2 MDQwCwYJYIZIAYb9bAIBMAcGBWeBDAEBMAgGBmeBDAECATAIBgZngQwBAgIwCAYG Z4EMAQIDMA0GCSqGSIb3DQEBCwUAA4IBAQAkpDVI+nCKnAEEpDfldytHXUYOr2ys aGeboE3d1KAN4Gt+eioRvgNdmDKbVFCYY0C6ErIXIvSGXafsprU2dclka/kmH+9U 4q3v5Acx6KwcnEuYLN0QOtrlQ9s3Z4IbIzdYUv8IauXC27a3x99x2WMVxNu1KGJy 0r1Z+Xya1adf9/e1LFj1CGdq9HfQ/HFWP2khzxQZ4u62sOHuZdPgtNidFOhQLC+2 5cNsPgqsaCrGLbSjzni7VN7NhAbTsLhA1oz41vHHB+q4ZzNlC01elmPBOtupe2HM /lqMA/J/nTxc718THdxpszFllAET1/lFEolnqihpUFPaPjRwU7yZIseS -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
- Valid from
- 2024-01-18T00:00:00+00:00
- Expires
- 2031-11-09T23:59:59+00:00
- Days remaining
- 1854
- Serial (hex)
- 0FE032AB844D033106C50C8E13C8B068
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- authorityKeyIdentifier
- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
- crlDistributionPoints
- Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
- certificatePolicies
- Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE----- MIIEfjCCA2agAwIBAgIQD+Ayq4RNAzEGxQyOE8iwaDANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD QTAeFw0yNDAxMTgwMDAwMDBaFw0zMTExMDkyMzU5NTlaMGExCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI 2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx 1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo4IBMDCC ASwwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUTiJUIBiV5uNu5g/6+rkS7QYX jzkwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/BAQD AgGGMHQGCCsGAQUFBwEBBGgwZjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZGln aWNlcnQuY24wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNu L0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNydDBABgNVHR8EOTA3MDWgM6Axhi9odHRw Oi8vY3JsLmRpZ2ljZXJ0LmNuL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDARBgNV HSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQELBQADggEBAHRBl3jN7+XHBUK0dZnu hMdoNwD1nCROU3BTIh1TNzRI0bQ0m5+C/dCRzzlqoSAFHUlOi+OiDltWkXTzmQn6 Z8bH5PFBy5sYpc/8cNPoSzhyqcpvvEZvv/Ivc0Up+dzma7vBDJC9WrMRUUlSFSQp kdXSmphDNkXJsgARmxzc18IN6LYMRiOWlY7RE2F900pPW60BvJHHNCX0bbSRj/Ql bmVq8wuftBD++D+RS8K++ujpMjFBROyWfBX+woQDGsMazkmgulQdnZrdj476elOL axRvrSgEorju1kJM7M65z2RUZrfzQYW/1rs8mRUXin6iEtad/Rv1ZI1WGYmWPyBm pbo= -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.