SSL certificate
TLSv1.3hosttech.at · 185.229.88.49:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- serialNumber=CHE-114.992.562 jurisdictionC=CH businessCategory=Private Organization C=CH ST=Zürich O=hosttech GmbH CN=hosttech.at
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA EV R36
- Valid from
- 2025-11-27T00:00:00+00:00
- Expires
- 2026-12-02T23:59:59+00:00
- Days remaining
- 68
- Serial (hex)
- 0EC0B8CCF9D9280583F2B672BE80E08F
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:hosttech.at, DNS:www.hosttech.at
SHA-256 fingerprint
B9:FD:5E:74:6F:BC:10:56:07:3F:F5:DA:58:87:6A:7D:80:0C:56:5F:48:92:E5:93:D0:B0:51:5D:B8:0D:C6:E6
Certificate extensions & PEM
- authorityKeyIdentifier
- 98:2D:5E:1E:8F:EB:54:F4:B9:FF:55:95:AD:4C:C7:7E:A4:98:AE:7B
- subjectKeyIdentifier
- 1B:16:EB:A9:4B:5F:10:C6:51:8E:82:A1:FA:0D:B9:47:3F:40:10:5B
- keyUsage
- Digital Signature, Key Encipherment
- basicConstraints
- CA:FALSE
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 1.3.6.1.4.1.6449.1.2.1.5.1 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.1
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAEVR36.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAEVR36.crt OCSP - URI:http://ocsp.sectigo.com
- subjectAltName
- DNS:hosttech.at, DNS:www.hosttech.at
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 27 15:29:56.731 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:52:45:C9:94:C1:6E:7B:4A:A9:E1:41:80: 90:7C:9D:5C:1A:ED:52:A1:CA:8C:62:A3:11:79:6E:04: E6:46:8C:6F:02:21:00:83:A6:BD:2F:75:16:BA:E5:58: 23:F0:78:8D:3B:03:D9:F3:7A:6C:83:A8:0C:19:35:02: D2:DD:CC:FD:29:77:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB: 81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A Timestamp : Nov 27 15:29:56.915 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:DD:8A:CE:B5:C9:49:34:D9:AA:2D:6C: 1C:34:18:12:22:B2:4C:4B:BE:93:EA:DA:6D:AD:CB:42: 7C:16:77:21:C5:02:21:00:C4:90:30:AD:44:29:3C:FC: FD:49:01:B4:3D:0B:03:BC:09:69:E2:DE:0B:2A:1D:66: E0:AA:66:B1:61:56:DE:E1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 27 15:29:56.721 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:EA:2B:45:1C:5B:F4:1C:97:48:8A:B3: 6F:E8:BF:B0:DD:BB:03:D9:87:F0:44:81:EE:AF:E5:E1: 2F:85:5B:2B:6B:02:21:00:90:4C:DA:B4:0A:56:4B:6F: A1:D3:CC:05:A1:76:C2:34:70:18:77:6F:6C:58:83:18: F6:7B:75:9D:0F:AE:61:24
-----BEGIN CERTIFICATE----- MIIHVDCCBbygAwIBAgIQDsC4zPnZKAWD8rZyvoDgjzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRVYgUjM2 MB4XDTI1MTEyNzAwMDAwMFoXDTI2MTIwMjIzNTk1OVowgZsxGDAWBgNVBAUTD0NI RS0xMTQuOTkyLjU2MjETMBEGCysGAQQBgjc8AgEDEwJDSDEdMBsGA1UEDxMUUHJp dmF0ZSBPcmdhbml6YXRpb24xCzAJBgNVBAYTAkNIMRAwDgYDVQQIDAdaw7xyaWNo MRYwFAYDVQQKEw1ob3N0dGVjaCBHbWJIMRQwEgYDVQQDEwtob3N0dGVjaC5hdDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYNqHp3G7qwrkLDNLWnITcB /tqSxbUgjJOOmVpHBLfr+EZrY5s8JXmUrKFSAZ9IIo0V+JEwuo16VrfZcRksR4ak iHy+x6jL1x6z5pm53T3gnSxmDRfy7KSFiGGYmgB2Ra2487JEVp3n9iaGqIo0zjR2 ESd/uFzRbamxI9714echVAChBgfvuK10eegKC7eIzT/9ZdxdL7PmJTq6rmmb/YoZ hHUEbBceNb88Vc9fvbleGdERzQ+imY5aSPgXwgvC19EZerv4R3Xd8nMTD7gQJGo4 LW8IrloLK5hlAZ63/q3dYtfgtnjLvZ0kgti6v6v/WXFyKJaoiti2So7horaUtLUC AwEAAaOCA0wwggNIMB8GA1UdIwQYMBaAFJgtXh6P61T0uf9Vla1Mx36kmK57MB0G A1UdDgQWBBQbFuupS18QxlGOgqH6DblHP0AQWzAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDATBJBgNVHSAEQjBAMDUGDCsG AQQBsjEBAgEFATAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ UzAHBgVngQwBATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28u Y29tL1NlY3RpZ29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvbkNBRVZSMzYuY3Js MIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGln by5jb20vU2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uQ0FFVlIzNi5j cnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMCcGA1UdEQQg MB6CC2hvc3R0ZWNoLmF0gg93d3cuaG9zdHRlY2guYXQwggGABgorBgEEAdZ5AgQC BIIBcASCAWwBagB2ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAAB msXvd/sAAAQDAEcwRQIgUkXJlMFue0qp4UGAkHydXBrtUqHKjGKjEXluBOZGjG8C IQCDpr0vdRa65Vgj8HiNOwPZ83psg6gMGTUC0t3M/Sl3wQB3AK9niDtXsE7dj6bZ fvYuqOuBCsdxYPAkXlXWDC/nhYc6AAABmsXveLMAAAQDAEgwRgIhAN2KzrXJSTTZ qi1sHDQYEiKyTEu+k+raba3LQnwWdyHFAiEAxJAwrUQpPPz9SQG0PQsDvAlp4t4L Kh1m4KpmsWFW3uEAdwCsqzBwbOvshDH0E9L0kV8RHkIkQ7HypoxPPCs7px4CwwAA AZrF73fxAAAEAwBIMEYCIQDqK0UcW/Qcl0iKs2/ov7DduwPZh/BEge6v5eEvhVsr awIhAJBM2rQKVktvodPMBaF2wjRwGHdvbFiDGPZ7dZ0PrmEkMA0GCSqGSIb3DQEB CwUAA4IBgQA/fDIhv4mzZvQl1Z6ALS3RDVD2PDlCSjoOm4w7or9F2TAnsUvZGxUb q7IPmCBiG4vCwhcr+0KJvDHnb2ytebolTC9nUH6dm6xYYMyYqQFtrIfcVCD3hWkV 61NDhGY/wTj0X0u3OmaMpRVFRsZ5naLv9Vo/tQ2OJFHe41oAX5Tm8jNLLs/Xetov eg/yVwYwyW3mauhJQGsZP+g/JhE/gPh5vJagBppsgKCipn4WJaUgcZ9Mw6KC36kq dcYjTqyLM+/PWm1ZdSb2k0rx6qTITaXcwmCGjEBJ2YOcbKb+d4cLz+Bxpqdiau6c C/yomjvJBCoF5Er0OWtc7VBKQh4kekebAe2fdLhw6PSo+Gvvg+wSa1auGwtn9fzr n+DLeo7JcHMBX22ZJdRWzk0eAy+ntjAoalWAmWgP2b2asrM6slupeeeP//TE+n1r DkTYHZw4vyhI87fbEq2qWWjNmxnVPPBSCjs1u/j2gP70fjywx0oZGbKuj+5CfMNd Yo92Bz8Bo0c= -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-09-25T19:44:15+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA EV R36
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2036-03-21T23:59:59+00:00
- Days remaining
- 3465
- Serial (hex)
- 6D4F7CAD335377C8C6E001DDE2E2C88E
- Signature
- RSA-SHA384
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
7A:1A:24:28:5E:25:E9:4D:F2:7C:E8:B3:44:B1:BB:6B:32:F0:25:4F:F0:D7:B5:AB:6E:85:6A:E9:0C:FD:E5:5C
Certificate extensions & PEM
- authorityKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- subjectKeyIdentifier
- 98:2D:5E:1E:8F:EB:54:F4:B9:FF:55:95:AD:4C:C7:7E:A4:98:AE:7B
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:0
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy Policy: 2.23.140.1.1
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE----- MIIGSzCCBDOgAwIBAgIQbU98rTNTd8jG4AHd4uLIjjANBgkqhkiG9w0BAQwFADBf MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRVYgUjM2MIIBojANBgkqhkiG9w0B AQEFAAOCAY8AMIIBigKCAYEApduwxkQH5noeb0k4yRXK47Fd+hVkH8twKWQF3FNm HHShQrOH7S0L3p8Aaf8P7OqojwyZgyqD5o/Sb95N45P/NfmL+lfAOkQ1Bpvz0OcZ VmwYhMWFYJe8parkz5w9Bk8mn/AtN65hIQF0NqBI6F+23/jzhlpl3E0zKkkUJSfT dgvwaJvTiPgLQ7CpYyLJvMpgdPHf+nnvA5YJjhae6olh6BRllvRhzKOq0gd60BrO Aos9QyOfYhUDG3eQovMA9fyiI2qNclCp6DY8hqt55lERoBS/Whza8Cx1bh6q8rTP nno2uI6FZb2UavIYblyGDamXAW/jv3qsMB42xz/p2mUHg0wQzn/8KAiyu2ZbDs7E OOwYx0V2ViNsCXGR/GCmJsUNPmhEEXBclOj6qF7rFf7nkST2bokSt9VF1NB1JgRl djZin1+v2Vm88UEgFxerQPPrPjAEMqDx44vKl22sGWnl+jOyxf/H59DHKbIezrIY rJpSnA3WEVaiXs1oIRy1ZziNAgMBAAGjggGAMIIBfDAfBgNVHSMEGDAWgBRWc1hk lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQUmC1eHo/rVPS5/1WVrUzHfqSYrnsw DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMBoGA1UdIAQTMBEwBgYEVR0gADAHBgVngQwBATBU BgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29Q dWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYuY3JsMIGEBggrBgEFBQcB AQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGln b1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdFI0Ni5wN2MwIwYIKwYBBQUH MAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBDAUAA4ICAQA2 LRCehSXiyw56alKt2aqDwDLEDmyu74lUmDG4rI1Jw3+ivLz+OK3NpE466a8yXu7b f326wkrrOCF2SVu3ItNjXqsgwXdIM9tapVEKjsEwbjcPUcxNeqzSpLSgHZIVhjJJ +QtdEL2n1NhDxqewlN+ZKWWBLGB0LA/S7SvCl9s7rsppo97uv6J3h//q4b2SgzHu KUu80Hofpjp2bILGHy4CqzKzyg3wn9sKFcX6Ufkcea/tuiWhIMPkiQCv5tXsRj+H n3CZql+wRPbjhNqncCkzrwOBrt7Gov46EHhqMUP/Euf8gSw7X+CzWEUJ0Q+Vn8VL ZDkiKcMSYMJI+6Trc5tVn9LQLI6tTzwagLhgcVtFpom3PVtEJRPN/d05L0ck7S1b xPaXcQhKUqdzFd09pt6fLx2vMmylBKXjKosSxjB12KRzLvI2CUUVdpl7OTFA32Fk +zQC2gJPGmPPCzRMRYfVOEIZxbG0nI9lpYZidLkQ/EyTtJ3JVj7cb3KRe/e1s+Xj rnHqbUwoizicfogtcKm5giwj74f+Rpr0RRy4xum1bC662fNHRJaTt5ErVR6gHjHM Zhp+tOeOvohq5XxIMCKuetnwcPeBsOzUBzmUPoxQNRVXEYbwV2rS3t2jJ0Zh/Dnn O96biaAsEnxbQyu4fvMx6D4J4Zbkc7Zp75T3GE/UjQ== -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Issuer
- C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2038-01-18T23:59:59+00:00
- Days remaining
- 4133
- Serial (hex)
- D27FBBC1DE359E5216AD6149586099C4
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
- authorityKeyIdentifier
- 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
- subjectKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy
- crlDistributionPoints
- Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE----- MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR 8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34 MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr +vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1 BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0 S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24 RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1 VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb 9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2 Rnnyp58XRStJ -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.