SSL certificate
TLSv1.3internet2.edu · 146.190.15.120:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=US ST=Michigan L=Ann Arbor O=University Corporation For Advanced Internet Development CN=internet2.edu
- Issuer
- C=US O=Internet2 CN=InCommon Intermediate CA - OVG2C
- Valid from
- 2026-09-17T14:32:16+00:00
- Expires
- 2027-04-04T14:32:16+00:00
- Days remaining
- 190
- Serial (hex)
- 6F426564FF4ADEE0BBF76EE7AAE4CC
- Signature
- RSA-SHA384
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:internet2.edu, DNS:www.internet2.edu
SHA-256 fingerprint
78:CB:F1:0A:95:8D:2A:85:AC:AA:B5:50:39:5C:6B:5E:48:A5:67:7F:31:5B:92:14:80:02:69:CD:A9:E4:4D:C5
Certificate extensions & PEM
- authorityKeyIdentifier
- EC:93:D2:82:C2:96:F6:82:5B:2C:B4:FE:BB:CD:C0:D8:AC:6C:25:EE
- subjectKeyIdentifier
- 2F:C6:EF:D0:9C:5E:20:C2:DF:DA:E8:4D:CB:51:68:16:41:B8:C1:DA
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 1.3.6.1.4.1.5923.1.4.3.1.2 CPS: https://incommon.org/certificates/repository Policy: 1.3.6.1.4.1.50977.1.2.110 Policy: 2.23.140.1.2.2
- authorityInfoAccess
- OCSP - URI:http://ocsp-c.emsign.com CA Issuers - URI:http://repository.emsign.com/certs/EEEMIncommonOVG2C.crt
- crlDistributionPoints
- Full Name: URI:http://crl-c.emsign.com/?EEEMIncommonOVG2C.crl
- subjectAltName
- DNS:internet2.edu, DNS:www.internet2.edu
- keyUsage
- Digital Signature, Key Encipherment
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Sep 17 14:32:17.564 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:29:52:30:BE:BB:6D:69:9D:D7:9E:E7:42: 11:6F:21:02:7A:DE:07:CC:47:EA:8B:DA:04:6C:62:7E: 54:42:FA:A9:02:21:00:AE:35:93:75:84:FE:54:20:F8: DC:75:30:41:3F:EA:63:F1:6D:66:F4:66:A3:96:4A:B1: 1A:3C:B4:1A:60:8E:65 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 17 14:32:17.588 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:AB:83:8A:C1:C0:48:C9:E2:EB:15:F2: EF:3B:15:63:0E:CD:90:11:ED:63:E7:6C:4D:EE:8C:17: 18:E5:D1:6D:6A:02:21:00:BF:BD:C1:2E:C5:D2:F4:A0: A0:30:43:25:CE:DA:9D:73:B1:4F:8D:D6:EB:76:68:40: 4D:54:F4:EA:0A:DB:CC:11 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Sep 17 14:32:17.765 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D2:90:9A:86:A4:04:94:F9:F6:D0:E2: 93:20:13:7A:B5:C4:D0:CA:50:B4:6C:68:5C:AB:D4:64: 75:F2:98:B8:5E:02:20:4D:28:8B:97:F7:25:F6:D0:25: D2:4A:73:B7:93:AE:CD:66:9C:1D:FE:D0:81:E9:3B:37: 59:60:14:75:19:9B:68
-----BEGIN CERTIFICATE----- MIIHuzCCBaOgAwIBAgIPb0JlZP9K3uC7927nquTMMA0GCSqGSIb3DQEBDAUAMEwx CzAJBgNVBAYTAlVTMRIwEAYDVQQKDAlJbnRlcm5ldDIxKTAnBgNVBAMMIEluQ29t bW9uIEludGVybWVkaWF0ZSBDQSAtIE9WRzJDMB4XDTI2MDkxNzE0MzIxNloXDTI3 MDQwNDE0MzIxNlowgY8xCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNaWNoaWdhbjES MBAGA1UEBwwJQW5uIEFyYm9yMUEwPwYDVQQKDDhVbml2ZXJzaXR5IENvcnBvcmF0 aW9uIEZvciBBZHZhbmNlZCBJbnRlcm5ldCBEZXZlbG9wbWVudDEWMBQGA1UEAwwN aW50ZXJuZXQyLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpk cdVUkQ8NKXcCt4g1A7bRwFKFqmzQOHulISr2HCrDFwYxoUVv6q6/qjIW6CvADbJP 7/uwfTUCATMFYEU1tdMdkIkXtuNEF0ll5i6baVLLHBAeQUbhlD4b/GFY0V17Z4jy 76zW8tbbfuyeQhDF8t6mq4b9g884bVnYq0RnhoGpVdGooPK/vwqm8Kgl26JqtRFo KpEwd/Sx2u5hw7/pi3OrMdZAH/dBdswD9yKQTl70+rdYv06dWPg9I61qhmqOG1nl LGqYXkvRJayPya14b7CFU7wsgXRxZtaVAl9tDU04U59Blqia6qy5L6N4qepomqlW KMJjAJkp3R+y3qW9Y+UCAwEAAaOCA1QwggNQMB8GA1UdIwQYMBaAFOyT0oLClvaC Wyy0/rvNwNisbCXuMB0GA1UdDgQWBBQvxu/QnF4gwt/a6E3LUWgWQbjB2jATBgNV HSUEDDAKBggrBgEFBQcDATBuBgNVHSAEZzBlMEoGDCsGAQQBriMBBAMBAjA6MDgG CCsGAQUFBwIBFixodHRwczovL2luY29tbW9uLm9yZy9jZXJ0aWZpY2F0ZXMvcmVw b3NpdG9yeTANBgsrBgEEAYOOIQECbjAIBgZngQwBAgIwegYIKwYBBQUHAQEEbjBs MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC1jLmVtc2lnbi5jb20wRAYIKwYBBQUH MAKGOGh0dHA6Ly9yZXBvc2l0b3J5LmVtc2lnbi5jb20vY2VydHMvRUVFTUluY29t bW9uT1ZHMkMuY3J0MD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jcmwtYy5lbXNp Z24uY29tLz9FRUVNSW5jb21tb25PVkcyQy5jcmwwKwYDVR0RBCQwIoINaW50ZXJu ZXQyLmVkdYIRd3d3LmludGVybmV0Mi5lZHUwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud EwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2ANbVjanQF1Pzakqg x1dJAq/rx9ws04zZ92TIDIkZHp8CAAABoK/IV5wAAAQDAEcwRQIgKVIwvrttaZ3X nudCEW8hAnreB8xH6ovaBGxiflRC+qkCIQCuNZN1hP5UIPjcdTBBP+pj8W1m9Gaj lkqxGjy0GmCOZQB3AExj3JjlnB2riPYeij3ero+rRKM3e1+blMP7oZz8wb4mAAAB oK/IV7QAAAQDAEgwRgIhAKuDisHASMni6xXy7zsVYw7NkBHtY+dsTe6MFxjl0W1q AiEAv73BLsXS9KCgMEMlztqdc7FPjdbrdmhATVT06grbzBEAdgBgTJqven93XwHU BvySDciZ6wscffjJUhv6+hd3O5eLyQAAAaCvyFhlAAAEAwBHMEUCIQDSkJqGpASU +fbQ4pMgE3q1xNDKULRsaFyr1GR18pi4XgIgTSiLl/cl9tAl0kpzt5OuzWacHf7Q gek7N1lgFHUZm2gwDQYJKoZIhvcNAQEMBQADggIBALWacs8GTac+z4KTWyhvtehL /0+6LKMfg13/jPdzTdzHIZ+eXLHoVRiYZTaBe8OEn7I1ijxyDK2Lu6Fis7JUoRtr C7ZpRWvSKQRjSs42TunRVgUfk+LvyxOSQcpDsLkRaIWicJTdRWZD/Iq2PtkhTGQj unl0a3+QVTgpXWXK8eNmD93OJh8YhTI6azRD11gqivocgrIgzzIWqd+UuVyF07V5 hXX0HbP63OBeBfCN/7UNg7heWWYRSoIKu69sWNK3DD3MWutrM8Ukxa5pWWh5URkK 4TtrA4jjauovhNTOKUy9E6aFTTZYET8iEL2v+S+Cpo3FOmY3YRoHbp0vgrsy/0AL C6yKoB1nhvdUjD00KE5vItkWEB1kkEkcTowddIOjLSjS5CUDu2ceReftpjwpJAzD uU4mv+F2eoPIHOivHquvqnbsAcEaNypM69oYYfX2OC/Eanev89tqcdCcZSqTe/KY hs1nAGQEVeIVBY2SKqdiknlCOSNssjOE2dSbqqc3V6YUbbXlfmvrY7Pa4wp3Vt0J jV/XEUghoLEZHH/bDcRrS5NxccezSP1mzQVwAkFB+1tR6NN73VMtfKq9g7w25VNE y+oUPOHj7j0WzlynpMz+pL54KtjzSocR1MmA1/+ZYejVnIe+8baXA1f8kcpNg4sL /s/SVzIWW3cZoE48vDyG -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-26T03:25:43+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=Internet2 CN=InCommon Intermediate CA - OVG2C
- Issuer
- C=IN O=eMudhra Technologies Limited CN=emSign Root TLS CA - G1
- Valid from
- 2026-04-08T19:50:50+00:00
- Expires
- 2029-04-07T19:50:50+00:00
- Days remaining
- 924
- Serial (hex)
- 63A4D371C1A726EEBA6078D651F7DC
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
BA:02:F2:F9:7B:A4:81:D1:9E:D4:90:6B:AB:56:02:A9:CE:1C:CE:5D:1F:36:2E:B5:EC:4F:9D:82:8E:F0:9F:FC
Certificate extensions & PEM
- authorityKeyIdentifier
- 64:1D:C9:D8:F8:C4:EC:04:4B:22:81:F5:32:9A:5E:B9:E7:93:52:F9
- subjectKeyIdentifier
- EC:93:D2:82:C2:96:F6:82:5B:2C:B4:FE:BB:CD:C0:D8:AC:6C:25:EE
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 1.3.6.1.4.1.5923.1.4.3.1.2 CPS: https://incommon.org/certificates/repository Policy: 1.3.6.1.4.1.50977.1.2.110 Policy: 2.23.140.1.2.2
- authorityInfoAccess
- OCSP - URI:http://ocsp-c.emsign.com CA Issuers - URI:http://repository.emsign.com/certs/EMIncommonOVG2C.p7c
- crlDistributionPoints
- Full Name: URI:http://crl.emsign.com/?roottlscag1.crl
- keyUsage
- Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:0
-----BEGIN CERTIFICATE----- MIIGzTCCBLWgAwIBAgIPY6TTccGnJu66YHjWUffcMA0GCSqGSIb3DQEBDAUAMFYx CzAJBgNVBAYTAklOMSUwIwYDVQQKDBxlTXVkaHJhIFRlY2hub2xvZ2llcyBMaW1p dGVkMSAwHgYDVQQDDBdlbVNpZ24gUm9vdCBUTFMgQ0EgLSBHMTAeFw0yNjA0MDgx OTUwNTBaFw0yOTA0MDcxOTUwNTBaMEwxCzAJBgNVBAYTAlVTMRIwEAYDVQQKDAlJ bnRlcm5ldDIxKTAnBgNVBAMMIEluQ29tbW9uIEludGVybWVkaWF0ZSBDQSAtIE9W RzJDMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu6HcyPexusIJsSoL yyFZK3bms4rVepA7WBjEtZuzKGkyLhUIZxwPPFOhbaZMyNZxGJ+McQT5IuhLg/uG q8oyCPU92psOisN+EO+I1+TcWxOBjPnxg88GmcpCYpwSmwQdRHQxrFFh9ABqsgUf KYT8kQvHNC0Ec2oUa0DgY9STbBi11oAlxlWHT/Ya4lRQbCfrwYBiBa4G6FfEmjGn 0ouUA3j7Ev41TpM29PHblA45PFilXNJVESSHZPEGvDsoaDcfIMhYbdbWnXRBHJPY wEVC0AwqfEg3/zUPAQh2LzmTtOZGZwGW0bTWXeDP+ercRj9qgM26WJkl7CumL8PN BHBS95zL/6IFtIeh7MR3m6louip6LzYHxLYepYWw8o9GB+7/wbh1CInTtETsG4yl oS0m0AjCS3py6JLiSweCKdVOVx5XfXSn4lBUMmMA+x+xJUQ90PGMDK6Vx2qfxpm/ Vr2rZXjX9z/rVYfbdmIHvVkP/qIo+h38UDuxu5H7DaRCXnbOBT1dGoKY48RJgZNm dyb4eP4dtV+LEO3LharMzTE3S+wEOaIrrYY65rUwYSP//nMeK0VrX3GvLoYBNkgP aK23F58Gqt1aj30vZ7ssx0aLnIEvlVB1pVR517jrSIAoIAPh0LN8diY9k47UUqfp wAzOBFjxh1M2dGDBm2ToK3YzHmUCAwEAAaOCAaAwggGcMB8GA1UdIwQYMBaAFGQd ydj4xOwESyKB9TKaXrnnk1L5MB0GA1UdDgQWBBTsk9KCwpb2glsstP67zcDYrGwl 7jATBgNVHSUEDDAKBggrBgEFBQcDATBuBgNVHSAEZzBlMEoGDCsGAQQBriMBBAMB AjA6MDgGCCsGAQUFBwIBFixodHRwczovL2luY29tbW9uLm9yZy9jZXJ0aWZpY2F0 ZXMvcmVwb3NpdG9yeTANBgsrBgEEAYOOIQECbjAIBgZngQwBAgIweAYIKwYBBQUH AQEEbDBqMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC1jLmVtc2lnbi5jb20wQgYI KwYBBQUHMAKGNmh0dHA6Ly9yZXBvc2l0b3J5LmVtc2lnbi5jb20vY2VydHMvRU1J bmNvbW1vbk9WRzJDLnA3YzA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3JsLmVt c2lnbi5jb20vP3Jvb3R0bHNjYWcxLmNybDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0T AQH/BAgwBgEB/wIBADANBgkqhkiG9w0BAQwFAAOCAgEAdH5FnyKqAp7CLFY8ukWR IQ8Bg3lNrGfmrjGc6o22lM5prwW4lujuUfAHU/rIngZFOErPi9jo+ceQdVqQHdlJ lBdniTZKe9Qk1HHDb/RphrQqUC98a5KphR9E9f6kk2fPfuDPwzXAg7NXV4xYCeU3 2eOHt1t/f0jm0WyxWmumALglDVSc2Iv2fr3cZ74kFCcuL/kzATN1GJfLWiLvPwa5 Gz0OiROoBxxaNZy+5H6g9ISGuRy2SLuHhZ8wreM+Ot6Lla38BUqjDM1HDryU7hT2 UiFBFsncMTOE5EkWfLMDmx/yMxPtUBH6warlhO7uyHibKt/PVcBcqiE4A9y5RIry M47pSgx4dqX3LMN4Vu0iJrIfpMsEzwKpl9XznY//LTf56aBL3pRnX/AqrlzMtXUb ie/GSAkMOkdG60G8Zz2r2LHHiDy1J8UJCmVupabStMi+BZY/s3MFvlc/QHVzoa4U vM6BdBIyOTbt8RC/3iewPijDn7IuIh4G+ThMn0ESUWxiOk1yTvbItOQzydbe/Y9U OjckB/se1U32dzffqcSNbJTkf+d9s6Xkl+AwPdLJbKIiGpTjrDX5GGIiKralTwPr X0+l7CHKTQagfxIFw87BIwsVSp7F58LZQ2TkyuSIKatrgvGLExHx2GMQvU+CPoeX fAmmUhG+E2eDMnSBz12VkI4= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=IN O=eMudhra Technologies Limited CN=emSign Root TLS CA - G1
- Issuer
- C=IN OU=emSign PKI O=eMudhra Technologies Limited CN=emSign Root CA - G1
- Valid from
- 2024-07-11T14:52:21+00:00
- Expires
- 2039-07-09T18:30:00+00:00
- Days remaining
- 4669
- Serial (hex)
- F7AB65559E10812DF6484347586A25
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
9B:91:34:76:EA:B4:76:E2:1E:08:87:DB:CD:E4:43:45:D1:35:9D:28:11:6B:83:B7:CD:3E:87:BD:80:7E:BF:68
Certificate extensions & PEM
- authorityKeyIdentifier
- FB:EF:0D:86:9E:B0:E3:DD:A9:B9:F1:21:17:7F:3E:FC:F0:77:2B:1A
- subjectKeyIdentifier
- 64:1D:C9:D8:F8:C4:EC:04:4B:22:81:F5:32:9A:5E:B9:E7:93:52:F9
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy CPS: http://repository.emsign.com
- authorityInfoAccess
- OCSP - URI:http://ocsp.emsign.com CA Issuers - URI:http://repository.emsign.com/certs/emSignRootCAG1.crt
- crlDistributionPoints
- Full Name: URI:http://crl.emsign.com?RootCAG1.crl
- keyUsage
- Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:1
-----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIQAPerZVWeEIEt9khDR1hqJTANBgkqhkiG9w0BAQsFADBn MQswCQYDVQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11 ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3Qg Q0EgLSBHMTAeFw0yNDA3MTExNDUyMjFaFw0zOTA3MDkxODMwMDBaMFYxCzAJBgNV BAYTAklOMSUwIwYDVQQKDBxlTXVkaHJhIFRlY2hub2xvZ2llcyBMaW1pdGVkMSAw HgYDVQQDDBdlbVNpZ24gUm9vdCBUTFMgQ0EgLSBHMTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAMPm5mm136ImUw1EdfpP+tY0OmCgnH1eu6MvMr4P/isE dsRtmVjH653JHnPpPeUjGSbvLKGCabv9YvVBShZOvrI3GDIPrTguyUhONiygrjYS McbkG0WouoPFybNE1IjYleAuQ8mdz5gsZ96lCfaAfmy1C9pidUBweF9KWQ31HzQb Sak5T+0yqCyxNGZNdnrXodEwuH9kj+MOt3wL86K8KYH6CJv3uyhfa0UQw+Ho3tNH /DwdXs1m9FUViimqWd9GZcscYB7um484iVDVjimNd9cMY1bEMAFpCwzyycWvrjdj V74q48eCITrg41GSS6Wr0OxKBY3Mh1Yt+tl30MWQVcb0yZgt8e0Oq2a25LZYpTz7 eMBJ9+Zm+AJKE75vGKd0lwa68j9m8vb2+l1w3tbl1OAZGGA5D7FcBcGiIFAXm/aq s0lEYSZmp/UzGrwtswtPKnqhR87EolO+AMdvGJAnbhqsvrsX2FcxaV7Of2vIWDJ6 hdpWaHa5YjNXpCgDpiaKRd5F6opQsb8WmQdUswZgIocLb4egKzR/ndYX6xlxnL/h U7W2HLqXckLR1HNCFz6wLgLuHmi7Zf3x760BbP0HwRIWryGUDJhAmh+gg3JNT/HR BL9bYpBKL7yjM+IJ70Q4tRFWwlpGMziRNNOLeOkem1DBxDl6+Q3A0v5R/HLVMG0p AgMBAAGjggFyMIIBbjAfBgNVHSMEGDAWgBT77w2GnrDj3am58SEXfz788HcrGjAd BgNVHQ4EFgQUZB3J2PjE7ARLIoH1MppeueeTUvkwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo dHRwOi8vcmVwb3NpdG9yeS5lbXNpZ24uY29tMHUGCCsGAQUFBwEBBGkwZzAiBggr BgEFBQcwAYYWaHR0cDovL29jc3AuZW1zaWduLmNvbTBBBggrBgEFBQcwAoY1aHR0 cDovL3JlcG9zaXRvcnkuZW1zaWduLmNvbS9jZXJ0cy9lbVNpZ25Sb290Q0FHMS5j cnQwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbXNpZ24uY29tP1Jvb3RD QUcxLmNybDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBATANBgkq hkiG9w0BAQsFAAOCAQEABj/hFjkky/uOQZ0k3peoiVG7+qwhyC8TgaTLuDZisrnX 7S1GvSeiOs8xeKyp8dnCbE6S1XHFtJbZi8PtSi+3haElYjkSiGixXd8PYLtNmCn9 cK5ymSBVssavkolI3tONt1t2kzhyAaZItZqGOVJoeRxbSkM/vTKWKqlFYHn/J00u FG7ii70vEyF3Ly0scGHCpD1BFoYajQksxvQ1m3rtKKMwBucZNTejdA0Npf0iSiDX 9HUrEEqodKnRLUMSQz4K0Bd1kB3AVn8tT5JAc1HlgmxQ1OTTz5NcX60ATo4eQIHT a9Fb1/Op2vpQ/BhGF0vxOvg3nwleIchABUbyj9XnxQ== -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.