SSL certificate
TLSv1.3virtu.com · 199.16.172.212:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=tls.automattic.com
- Issuer
- C=US O=Google Trust Services CN=WR1
- Valid from
- 2026-08-09T15:58:47+00:00
- Expires
- 2026-11-07T15:58:46+00:00
- Days remaining
- 41
- Serial (hex)
- C6DBD18860EA1143134AA53BA62873FD
- Signature
- RSA-SHA256
- Public key
- EC 256 prime256v1
Subject alternative names (SAN)
DNS:tls.automattic.com, DNS:4c25c31e-2669-4823-a332-7df789357f1c.express.conves.io, DNS:acrelicgroup.com, DNS:autosmarthomes.com, DNS:catchlight-training.newspackstaging.com, DNS:edgelandscapingandexcavation.com, DNS:enginecustom.mx, DNS:eternal-eclipse.com, DNS:eternalmusicgroup.com, DNS:grimfaceofficial.com, DNS:icesales.ca, DNS:indigenthealthcaresolutions.com, DNS:nativesway.com, DNS:nativeswaycostarica.com, DNS:norcalsurflog.com, DNS:onewishproject.us, DNS:orquestadecamaradesevillaa.org, DNS:pjclbr.com, DNS:steadystatehealth.org, DNS:virtu.com, DNS:waynecountycsea.org, DNS:www.arkivalmusic.com, DNS:www.avaloncollisionpomona.co, DNS:www.avidcider.com, DNS:www.blog2.laundryheap.com, DNS:www.calljetty.com, DNS:www.dangrisoni.com, DNS:www.epsilonassociates.com, DNS:www.grimfaceofficial.com, DNS:www.hartcarecenter.org, DNS:www.hubblekitchens.co.uk, DNS:www.icesales.ca, DNS:www.lowcountrydentistryinc.com, DNS:www.norcalsurflog.com, DNS:www.orquestadecamaradesevillaa.org, DNS:www.pjclbr.com, DNS:www.smexpojax.com, DNS:www.steadystatehealth.org, DNS:www.tes.snc.mybluehost.me, DNS:www.toldistutoring.com, DNS:www.wpknd.org
SHA-256 fingerprint
8B:9A:5E:91:FF:2F:D8:E6:7F:93:9D:75:6F:D1:97:6F:93:7E:94:3B:F6:C6:BB:8B:FA:19:99:E3:01:DB:4A:F1
Certificate extensions & PEM
- keyUsage
- Digital Signature
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:FALSE
- subjectKeyIdentifier
- A5:23:A8:1A:28:3B:91:A8:42:C6:3C:44:E1:4C:CA:87:A9:32:6A:B2
- authorityKeyIdentifier
- 66:69:49:D4:DE:2A:9C:91:03:CF:89:0E:24:B8:0E:30:03:6E:88:2E
- authorityInfoAccess
- CA Issuers - URI:http://i.pki.goog/wr1.crt
- subjectAltName
- DNS:tls.automattic.com, DNS:4c25c31e-2669-4823-a332-7df789357f1c.express.conves.io, DNS:acrelicgroup.com, DNS:autosmarthomes.com, DNS:catchlight-training.newspackstaging.com, DNS:edgelandscapingandexcavation.com, DNS:enginecustom.mx, DNS:eternal-eclipse.com, DNS:eternalmusicgroup.com, DNS:grimfaceofficial.com, DNS:icesales.ca, DNS:indigenthealthcaresolutions.com, DNS:nativesway.com, DNS:nativeswaycostarica.com, DNS:norcalsurflog.com, DNS:onewishproject.us, DNS:orquestadecamaradesevillaa.org, DNS:pjclbr.com, DNS:steadystatehealth.org, DNS:virtu.com, DNS:waynecountycsea.org, DNS:www.arkivalmusic.com, DNS:www.avaloncollisionpomona.co, DNS:www.avidcider.com, DNS:www.blog2.laundryheap.com, DNS:www.calljetty.com, DNS:www.dangrisoni.com, DNS:www.epsilonassociates.com, DNS:www.grimfaceofficial.com, DNS:www.hartcarecenter.org, DNS:www.hubblekitchens.co.uk, DNS:www.icesales.ca, DNS:www.lowcountrydentistryinc.com, DNS:www.norcalsurflog.com, DNS:www.orquestadecamaradesevillaa.org, DNS:www.pjclbr.com, DNS:www.smexpojax.com, DNS:www.steadystatehealth.org, DNS:www.tes.snc.mybluehost.me, DNS:www.toldistutoring.com, DNS:www.wpknd.org
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://c.pki.goog/wr1/RqNGAH7p6w4.crl
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Aug 9 16:58:49.727 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:44:D7:14:E4:E6:E2:D9:67:CF:02:59:33: AD:3C:5D:DC:59:4C:5F:29:51:1D:CE:75:81:30:48:17: EC:36:6F:19:02:21:00:A6:7F:3B:C5:93:8B:01:E2:D7: 15:75:47:A1:5E:4A:63:AF:DB:65:1F:D9:AE:2D:2B:76: 27:0C:0E:13:BD:B4:F4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Aug 9 16:58:49.684 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BB:67:9A:C5:BB:F4:3E:15:E5:C6:28: 3C:D8:16:14:36:BD:D5:0A:6D:A1:91:35:AC:5F:44:1D: 23:6E:8D:86:FB:02:21:00:B9:38:B3:3D:3D:DA:4D:D8: 28:F7:72:5D:DC:86:3E:E0:96:02:E7:1E:69:09:50:79: 8B:F8:7D:CD:1E:A5:B4:74
-----BEGIN CERTIFICATE----- MIIH+zCCBuOgAwIBAgIRAMbb0Yhg6hFDE0qlO6Yoc/0wDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IxMB4XDTI2MDgwOTE1NTg0N1oXDTI2MTEwNzE1NTg0NlowHTEb MBkGA1UEAxMSdGxzLmF1dG9tYXR0aWMuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0D AQcDQgAED8zvNN0ZgNOKg9UrzjFHOtLfSD9tni1GTROBJUANdcUKbVZjytPH4u7O s+MR/3ZD44VM4iIUwzzmL+BpV7UwfKOCBeEwggXdMA4GA1UdDwEB/wQEAwIHgDAT BgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSlI6ga KDuRqELGPEThTMqHqTJqsjAfBgNVHSMEGDAWgBRmaUnU3iqckQPPiQ4kuA4wA26I LjA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAKGGWh0dHA6Ly9pLnBraS5nb29n L3dyMS5jcnQwggPZBgNVHREEggPQMIIDzIISdGxzLmF1dG9tYXR0aWMuY29tgjY0 YzI1YzMxZS0yNjY5LTQ4MjMtYTMzMi03ZGY3ODkzNTdmMWMuZXhwcmVzcy5jb252 ZXMuaW+CEGFjcmVsaWNncm91cC5jb22CEmF1dG9zbWFydGhvbWVzLmNvbYInY2F0 Y2hsaWdodC10cmFpbmluZy5uZXdzcGFja3N0YWdpbmcuY29tgiBlZGdlbGFuZHNj YXBpbmdhbmRleGNhdmF0aW9uLmNvbYIPZW5naW5lY3VzdG9tLm14ghNldGVybmFs LWVjbGlwc2UuY29tghVldGVybmFsbXVzaWNncm91cC5jb22CFGdyaW1mYWNlb2Zm aWNpYWwuY29tggtpY2VzYWxlcy5jYYIfaW5kaWdlbnRoZWFsdGhjYXJlc29sdXRp b25zLmNvbYIObmF0aXZlc3dheS5jb22CF25hdGl2ZXN3YXljb3N0YXJpY2EuY29t ghFub3JjYWxzdXJmbG9nLmNvbYIRb25ld2lzaHByb2plY3QudXOCHm9ycXVlc3Rh ZGVjYW1hcmFkZXNldmlsbGFhLm9yZ4IKcGpjbGJyLmNvbYIVc3RlYWR5c3RhdGVo ZWFsdGgub3Jnggl2aXJ0dS5jb22CE3dheW5lY291bnR5Y3NlYS5vcmeCFHd3dy5h cmtpdmFsbXVzaWMuY29tghx3d3cuYXZhbG9uY29sbGlzaW9ucG9tb25hLmNvghF3 d3cuYXZpZGNpZGVyLmNvbYIZd3d3LmJsb2cyLmxhdW5kcnloZWFwLmNvbYIRd3d3 LmNhbGxqZXR0eS5jb22CEnd3dy5kYW5ncmlzb25pLmNvbYIZd3d3LmVwc2lsb25h c3NvY2lhdGVzLmNvbYIYd3d3LmdyaW1mYWNlb2ZmaWNpYWwuY29tghZ3d3cuaGFy dGNhcmVjZW50ZXIub3Jnghh3d3cuaHViYmxla2l0Y2hlbnMuY28udWuCD3d3dy5p Y2VzYWxlcy5jYYIed3d3Lmxvd2NvdW50cnlkZW50aXN0cnlpbmMuY29tghV3d3cu bm9yY2Fsc3VyZmxvZy5jb22CInd3dy5vcnF1ZXN0YWRlY2FtYXJhZGVzZXZpbGxh YS5vcmeCDnd3dy5wamNsYnIuY29tghF3d3cuc21leHBvamF4LmNvbYIZd3d3LnN0 ZWFkeXN0YXRlaGVhbHRoLm9yZ4IZd3d3LnRlcy5zbmMubXlibHVlaG9zdC5tZYIW d3d3LnRvbGRpc3R1dG9yaW5nLmNvbYINd3d3Lndwa25kLm9yZzATBgNVHSAEDDAK MAgGBmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93 cjEvUnFOR0FIN3A2dzQuY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA1219 ENGn9XfCx+lf1wC/+YLJM1pl4dCzAXMXwMjFaXcAAAGf53Z7/wAABAMARzBFAiBE 1xTk5uLZZ88CWTOtPF3cWUxfKVEdznWBMEgX7DZvGQIhAKZ/O8WTiwHi1xV1R6Fe SmOv22Uf2a4tK3YnDA4TvbT0AHcAyKPEf8ezrbk1awE/anoSbeM6TkOlxkb5l605 dZkdz5oAAAGf53Z71AAABAMASDBGAiEAu2eaxbv0PhXlxig82BYUNr3VCm2hkTWs X0QdI26NhvsCIQC5OLM9PdpN2Cj3cl3chj7glgLnHmkJUHmL+H3NHqW0dDANBgkq hkiG9w0BAQsFAAOCAQEAf0tdq/skIKMZWzdlWmoV6o3HAGYPhX7sgx4vbOz7nd21 OxaJ4YwxYeK3a++udBeL2+qClYqR3PPok7PVHtmOPVBUa6uTyVjZClYUXmLVCGHN EsUSISSKRd1WKycUmSiPjLxbbO52TtSFVqwLqb1aJ3uq4k5WeYFUlhB129lhL2cW bJvqGrHlJ/e1Ts3iHHfyMQVAhehypJXJfFPHVZsPFN0PbPQfVohzdQPNdf57TFbS QW8Twe3eKuJ7QXSpzHtpDBXu2lKVRtF33vMr1EnPhkqttmiB6abtKIGnLVu2PC7B UDp+sN2Kzp66HYvIHIFP7igfLAfnhQWgc/3JdhSUFw== -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-27T11:02:22+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=Google Trust Services CN=WR1
- Issuer
- C=US O=Google Trust Services LLC CN=GTS Root R1
- Valid from
- 2023-12-13T09:00:00+00:00
- Expires
- 2029-02-20T14:00:00+00:00
- Days remaining
- 877
- Serial (hex)
- 7FD9E2C2D2048A0474B627A26D0868A7
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
B1:0B:6F:00:E6:09:50:9E:87:00:F6:D3:46:87:A2:BF:CE:38:EA:05:A8:FD:F1:CD:C4:0C:3A:2A:0D:0D:0E:45
Certificate extensions & PEM
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- subjectKeyIdentifier
- 66:69:49:D4:DE:2A:9C:91:03:CF:89:0E:24:B8:0E:30:03:6E:88:2E
- authorityKeyIdentifier
- E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
- authorityInfoAccess
- CA Issuers - URI:http://i.pki.goog/r1.crt
- crlDistributionPoints
- Full Name: URI:http://c.pki.goog/r/r1.crl
- certificatePolicies
- Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=Google Trust Services LLC CN=GTS Root R1
- Issuer
- C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
- Valid from
- 2020-06-19T00:00:42+00:00
- Expires
- 2028-01-28T00:00:42+00:00
- Days remaining
- 487
- Serial (hex)
- 77BD0D6CDB36F91AEA210FC4F058D30D
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
3E:E0:27:8D:F7:1F:A3:C1:25:C4:CD:48:7F:01:D7:74:69:4E:6F:C5:7E:0C:D9:4C:24:EF:D7:69:13:39:18:E5
Certificate extensions & PEM
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
- authorityKeyIdentifier
- 60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
- authorityInfoAccess
- OCSP - URI:http://ocsp.pki.goog/gsr1 CA Issuers - URI:http://pki.goog/gsr1/gsr1.crt
- crlDistributionPoints
- Full Name: URI:http://crl.pki.goog/gsr1/gsr1.crl
- certificatePolicies
- Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.11129.2.5.3.2 Policy: 1.3.6.1.4.1.11129.2.5.3.3
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.