SSL certificate
TLSv1.2ird.fr · 91.203.32.205:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=FR ST=Provence-Alpes-Côte d'Azur L=Marseille O=Institut de Recherche pour le Développement CN=*.ird.fr
- Issuer
- C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
- Valid from
- 2026-09-29T12:28:39+00:00
- Expires
- 2027-04-16T12:28:38+00:00
- Days remaining
- 185
- Serial (hex)
- 1DFD60FFE06B93C7925DD907D1078AFB
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:*.ird.fr, DNS:ird.fr
SHA-256 fingerprint
2B:D1:9F:5F:86:08:A8:56:BE:E2:9E:30:9F:BF:15:4B:97:EE:40:93:8D:E8:21:7B:6C:D8:A7:60:06:F8:C9:39
Certificate extensions & PEM
- basicConstraints
- CA:FALSE
- authorityKeyIdentifier
- 86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
- authorityInfoAccess
- CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer
- subjectAltName
- DNS:*.ird.fr, DNS:ird.fr
- certificatePolicies
- Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
- subjectKeyIdentifier
- 30:79:C5:A5:D3:57:91:08:94:23:ED:47:F9:4E:72:27:6C:73:6A:33
- keyUsage
- Digital Signature, Key Encipherment
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : ED:DA:EB:81:5C:63:21:34:49:B4:7B:E5:07:79:05:AB: D0:D9:31:47:C2:7A:C5:14:6B:3B:C5:8E:43:E9:B6:C7 Timestamp : Sep 29 12:38:41.367 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:11:21:B5:C0:5F:78:AD:31:C0:85:DC:71: 87:3B:4E:F0:C0:88:67:18:E4:39:25:CC:D5:72:71:92: E7:0D:29:82:02:20:20:FA:38:00:B1:88:E4:9A:37:6A: 8B:80:14:6D:2C:DA:52:85:46:DD:8D:78:0A:8C:75:47: 83:97:70:6F:9D:BC Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Sep 29 12:38:41.269 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C0:73:78:DC:84:CE:8A:CC:A5:45:1A: 77:CD:BD:0F:41:1F:3F:6C:B6:09:13:19:AA:12:D0:73: 5C:6B:84:C5:D8:02:20:77:D4:74:2B:68:47:85:6D:ED: 90:7B:77:B8:4F:57:F0:24:B1:4A:D0:22:4A:D1:B4:FA: 69:E7:30:26:6C:E2:7C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Sep 29 12:38:41.294 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:FD:3B:12:5B:E1:D7:79:86:BF:00:4F: AA:CF:91:61:87:E5:C9:55:A2:F3:C4:42:66:B5:29:4B: D7:83:87:0D:17:02:20:1D:10:12:FA:F4:AE:36:63:BD: A2:05:64:52:64:07:7F:0D:42:8E:11:99:3D:43:1E:2F: 75:1A:11:58:1C:E1:97
-----BEGIN CERTIFICATE----- MIIH1TCCBj2gAwIBAgIQHf1g/+Brk8eSXdkH0QeK+zANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAx MB4XDTI2MDkyOTEyMjgzOVoXDTI3MDQxNjEyMjgzOFowgZExCzAJBgNVBAYTAkZS MSQwIgYDVQQIDBtQcm92ZW5jZS1BbHBlcy1Dw7R0ZSBkJ0F6dXIxEjAQBgNVBAcM CU1hcnNlaWxsZTE1MDMGA1UECgwsSW5zdGl0dXQgZGUgUmVjaGVyY2hlIHBvdXIg bGUgRMOpdmVsb3BwZW1lbnQxETAPBgNVBAMMCCouaXJkLmZyMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAkUBFwjX5xZbgvQlBaAZw6Jd8jIu8Mal/5uJF 7MoyTqGXOym7RtTifcIrnT9mTJsCi3HuQnR22jkmwmL/G53j9M6P9OVJnJ2RwjUR nJYDkLh3wMgDNVGNOXnTg93UJzanXY/iFvph+XViffhJfG+nnZS+FIq4+0rpdBE0 IBlMQ0gg7njDWh28yqXtadixb58w88Cxrdu8hHGBkblldWPhLbULq6D2mydk6OSP 1tIQgEwP6XXZC3FihgV/3tVB9/iNDV8RfUt6bZm11GLs8+3U2SUj/Lj2b0GVzVEt BEiqIDDncCwZnAeWoMn1MpA91wHFBep8thd0a9fDjJ8gQTcXuRXo+jaXOfQTSQdC 1405flCqXCwCDB8cGqP2/deqijGzyQI/wx4ZA2Wz7uCOzKfpmUBDKleKxLdC1Cco Y87iWhqnIFEOiDMt/JP7uKz2Bb7Djk2NWwYWEtskTYEfAw2ZNsHsZ7hB0Jit6qz0 stMqd8o1Yg5WF+J8J3/wFanNbUFdqwud3LTZ0dFXIYYCobuCoK4aAkazTkb9fz5j PBPqYOORGVwkvia4tNpgJjKhlKqNaFeetxJn8PiUUpfrsugXMocj0/RdvZXA89dW IbDZxTTrRCFKKaOJVi7ZP7o4y2BGgZlqHQIbfGjOqkf4sbimiQ4DYIOTKZazI8Gl ZVCu9ckCAwEAAaOCAtcwggLTMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUhgFy P4ypcOIxBlMWzgFfW3nIPDswSAYIKwYBBQUHAQEEPDA6MDgGCCsGAQUFBzAChixo dHRwOi8vY3J0LmhhcmljYS5nci9IQVJJQ0EtR0VBTlQtVExTLVIxLmNlcjAbBgNV HREEFDASgggqLmlyZC5mcoIGaXJkLmZyMC0GA1UdIAQmMCQwCAYGZ4EMAQICMAgG BgQAj3oBBzAOBgwrBgEEAYHPEQEBAQIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMBMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuaGFyaWNhLmdyL0hB UklDQS1HRUFOVC1UTFMtUjEuY3JsMB0GA1UdDgQWBBQwecWl01eRCJQj7Uf5TnIn bHNqMzAOBgNVHQ8BAf8EBAMCBaAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1 AO3a64FcYyE0SbR75Qd5BavQ2TFHwnrFFGs7xY5D6bbHAAABoO0spdcAAAQDAEYw RAIgESG1wF94rTHAhdxxhztO8MCIZxjkOSXM1XJxkucNKYICICD6OACxiOSaN2qL gBRtLNpShUbdjXgKjHVHg5dwb528AHYARqI5Z8YNtkaHxm89+ZmUdpOmphEghFfV Vefj0KHZtkYAAAGg7SyldQAABAMARzBFAiEAwHN43ITOisylRRp3zb0PQR8/bLYJ ExmqEtBzXGuExdgCIHfUdCtoR4Vt7ZB7d7hPV/AksUrQIkrRtPpp5zAmbOJ8AHYA ABpdGhwtk3W2SFV4+C9xoa5u7zl9KXyK4xV7yt7hoB4AAAGg7SyljgAABAMARzBF AiEA/TsSW+HXeYa/AE+qz5Fhh+XJVaLzxEJmtSlL14OHDRcCIB0QEvr0rjZjvaIF ZFJkB38NQo4RmT1DHi91GhFYHOGXMA0GCSqGSIb3DQEBCwUAA4IBgQCP/G/pDW2A Bkntlt6BhzfCnTxAn33pW+fFBmxFBsSVDyOf7sHov8frPbPeaSUiFKBsvIct+xnI ddOOZ641p4nsLG/sL4hJXnXchVLPJaCHLheXJU6hHrs9GQgOIKTc1IfNb+tv//lb pHIf4OxJ98b1sS8SQUZ2xdo45jLPYACs0tLdoW343D59dDRenW6Ejf4+TAdPTYgT 47ZeUmW2ObCI2OzdQCMTuWuZgpeOTK16duox314d/uyGgew+SvZmRE6BbmK8rf5m Yh/qdatw2EJMhr4ssM9fZiieXJTMEfvEnEt6TptA6SZbFHN/LweKuIqms7h7kqMr 53iGS8wVWYEKsQVlznQGdadq084U6dx60GlIzNd4PRY2cSBvR5sWGtu8l4AcxYsT 5s451Q512ZsEB9KN+z4ppUL/UyWm2vzIKxi99cQsBbbmBg9f+BBtTAJXs5c4jQPf lhpwlxLk75w6g4SAQ+WnKVMgOOJ0GFFdQGc8gTcYa0YuEN8+5PzqJuo= -----END CERTIFICATE-----
Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-12T17:55:19+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
- Issuer
- C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
- Valid from
- 2025-01-03T11:15:00+00:00
- Expires
- 2039-12-31T11:14:59+00:00
- Days remaining
- 4827
- Serial (hex)
- 14D57BF3692228219A5567FA91651B22
- Signature
- RSA-SHA256
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
5B:67:8D:C4:40:95:A5:28:95:B6:3B:31:F2:72:27:F4:B3:6C:3E:34:74:91:BF:2B:FA:69:18:37:A5:FB:8C:79
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- authorityKeyIdentifier
- 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
- authorityInfoAccess
- CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-RSA.cer
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
- subjectKeyIdentifier
- 86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGBTCCA+2gAwIBAgIQFNV782kiKCGaVWf6kWUbIjANBgkqhkiG9w0BAQsFADBs MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg Um9vdCBDQSAyMDIxMB4XDTI1MDEwMzExMTUwMFoXDTM5MTIzMTExMTQ1OVowYDEL MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl YXJjaCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBSU0EgMTCC AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKEEaZSzEzznAPk8IEa17GSG yJzPTj4cwRY7/vcq2BPT5+IRGxQtaCdgLXIEl2cdPdIkj2eyakFmgMjAtyeju8V8 dRayQCD/bWjJ7thDlowgLljQaXirxnYbT8bzRHAhCZqBakYgi5KWw9dANLyDHGpX UdY259ab0lWEaFE5Uu6IzQSMJOAy4l/Twym8GUiy0qMDEBFSlm31C9BXpdHKKAlh vIjMiKoDeTWl5vZaLB2MMRGY1yW2ftPgIP0/MkX1uFITlvHmmMTngxplH1nybEIJ FiwHg1KiLk1TprcZgeO2gxE5Lz3wTFWrsUlAzrh5xWmscWkjNi/4BpeuiT5+NExF czboLnXOfjuci/7bsnPi1/aZN/iKNbJRnngFoLaKVMmqCS7Xo34f+BITatryQZFE u2oDKExQGlxDBCfYMLgLucX/onpLzUSgeQITNLx6i5tGGbUYH+9Dy3GI66L/5tPj qzlOsydki8ZYGE5SBJeWCZ2IrhUe0WzZ2b6Zhk6JAQIDAQABo4IBLTCCASkwEgYD VR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQKSCOmYKSSCjPqk1vFV+olTb0S 7jBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jcnQuaGFyaWNh LmdyL0hBUklDQS1UTFMtUm9vdC0yMDIxLVJTQS5jZXIwEQYDVR0gBAowCDAGBgRV HSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg NaAzhjFodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtVExTLVJvb3QtMjAyMS1S U0EuY3JsMB0GA1UdDgQWBBSGAXI/jKlw4jEGUxbOAV9becg8OzAOBgNVHQ8BAf8E BAMCAYYwDQYJKoZIhvcNAQELBQADggIBABkssjQzYrOo4GMsKegaChP16yNe6Sck cWBymM455R2rMeuQ3zlxUNOEt+KUfgueOA2urp4j6TlPbs/XxpwuN3I1f09Luk5b +ZgRXM7obE6ZLTerVQWKoTShyl34R2XlK8pEy7+67Ht4lcJzt+K6K5gEuoPSGQDP ef+fUfmXrFcgBMcMbtfDb9dubFKNZZxo5nAXiqhFMOIyByag3H+tOTuH8zuId9pH RDsUpAIHJ9/W2WBfLcKav7IKRlNBRD/sPBy903J9WHPKwl8kQSDA+aa7XCYk7bJt Eyf+7GM9F5cZ7+YyknXqnv/rtQEkTKZdQo5Us18VFe9qqj94tXbLdk7PejJYNB4O Zlli44Ld7rtqfFlUych7gIxFOmiyxMQQYrYmUi+74lEZvfoNhuref0CupuKpz6O3 dLv6kO9T10uNdDBoBQTkge3UzHafTIe3R2o3ujXKUGPwyc9m7/FETyKLUCwSU/5O AVOeBCU8QtkKKjM8AmbpKpe3pHWcyq3R7B3LmIALkMPTydyDfxen65IDqREbVq8N xjhkJThUz40JqOlN6uqKqeDISj/IoucYwsqW24AlO7ZzNmohQmMi8ep23H4hBSh0 GBTe2XvkuzaNf92syK8l2HzO+13GLCjzYLTPvXTO9UpK8DGyfGZOuamuwbAnbNpE 3RfjV9IaUQGJ -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
- Issuer
- C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions RootCA 2015
- Valid from
- 2021-09-02T07:41:55+00:00
- Expires
- 2029-08-31T07:41:54+00:00
- Days remaining
- 1053
- Serial (hex)
- 2A6086D4D4DE45C95E4B98FBBF2FBF26
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
4A:CD:8D:C6:02:0A:54:5A:85:89:43:A5:53:B5:E0:F3:FC:5B:85:9A:EA:17:46:65:0D:69:CF:12:10:F9:56:D8
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- authorityKeyIdentifier
- 71:15:67:C8:C8:C9:BD:75:5D:72:D0:38:18:6A:9D:F3:71:24:54:0B
- authorityInfoAccess
- CA Issuers - URI:http://repo.harica.gr/certs/HaricaRootCA2015.crt
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HaricaRootCA2015.crl
- subjectKeyIdentifier
- 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGwDCCBKigAwIBAgIQKmCG1NTeRcleS5j7vy+/JjANBgkqhkiG9w0BAQsFADCB pjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVu aWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRo b3JpdHkxQDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJ bnN0aXR1dGlvbnMgUm9vdENBIDIwMTUwHhcNMjEwOTAyMDc0MTU1WhcNMjkwODMx MDc0MTU0WjBsMQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVt aWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNB IFRMUyBSU0EgUm9vdCBDQSAyMDIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAi8Lnr2WbBWeWyQ0kudAOZPzO4iQYLIR/d1HLBBE2uF7taXGnnuQlCZdn wUfCz5EWNmI9OAThUYL/rNK0ad0u7BGjRe5raztMv4yNpB6dEbnpOPl6DgyY4iMd 0U5j1Oe4QUT7a69r2h/TxZGIW6SJktGB5ow5WKDWaUOprZhSWG7bCvtrz2j646Re OkVzmAfqXwJy3gyls5+uqR23HbP8ilnnbnJlrfUwlCMH84IWSzWYnFO7L8rkWtnH jR38mJn7LKSCa/AqH44LX3FcXK5CeymJgcsDo5nKiJ4LQAlBM9vmWHr9rplwwFoP 1hOGcS92afyQ3dstbtHym/Uaa55vFYx68EsooCI4gCRsNqQ78jCR83gTz8E/Navx HREjtUMingGStxgC5RHRgtsVAMxhN8EqfJrh0LqzUEbugqydMfj7I+IDAEhwowkm eRVTYPM4XK046oEAYxS5M17dC9ugRQcaMwn4TbSnAqZp9MJZBYhlhVauS8vg3jx9 LRrI6fsfo2FK1ioTrXdMGhibkQ9Y2AZUxZf4qj8giqaFpnf2pvwc4u5ulDMqg1CE CuVPhvhQRXgAgetbaOMmjcx7XFH0FCxAvhpgHXpyYR0fYy2Iqs6iRZAI/Gu+s1Aq Wv2oSBhG1pBAkpAKhF5oMfjr7Q3THcZ9mRhVVidlLo1FxSTszuMCAwEAAaOCASEw ggEdMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUcRVnyMjJvXVdctA4GGqd 83EkVAswTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzAChjBodHRwOi8vcmVwby5o YXJpY2EuZ3IvY2VydHMvSGFyaWNhUm9vdENBMjAxNS5jcnQwEQYDVR0gBAowCDAG BgRVHSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAx MC+gLaArhilodHRwOi8vY3JsLmhhcmljYS5nci9IYXJpY2FSb290Q0EyMDE1LmNy bDAdBgNVHQ4EFgQUCkgjpmCkkgoz6pNbxVfqJU29Eu4wDgYDVR0PAQH/BAQDAgGG MA0GCSqGSIb3DQEBCwUAA4ICAQDAze/rVni3cYGP1BWkxXnIVynqHcC6Cw7kbkXo XBZAqF9ANQAKoz2YQ+WyzrparKVilMG6p6mdWTKeLy6eQDRhFSu9DrMYr4TBYxIp 2e5ZLQBk96xbG3wSepBCkTDA0MA0NybzM0gF5nTa82BMCED8EQXliWWsgqUorXuk 7msadosX793M42llmAcj1zJkADzlyzi4gcPvIc4skfmz1OW9jxxwyaR/41VYzPVy w7m0rsL9n3v5PCFJ1zrldYayKq9gOdwOZInNJQgPU6imXEFBZWdqdR+xdL7qHVMk dzBRoFqnYjr2bonw87Rxk7dAsdzmUUPJTIayzDTdtU78XkOl0FivJWBXDQPiVB2Z 5NdOVPUANDnADA5octuC3YTG2ncpG9aNKM4ggAyr3imdnz5UZdioYkecv2TVJHT2 lXE5PH/ifJs8p9+WFgyzFsW97BUF1nKsZiUWvlyPY9C9PKuhI4OMeTEA99YIRXYj XDSZq300ko5sXUVKVG2osAR4Sr3wqS5hLGNBfym7FZwsQ+/ja+fenEALAbAiEMpI 9h71lpMpIhdx7rdRznNeSOok/pVMaqvBZ0IvAq+yXb7d8C+tAND0IcUxYyyJqkE7 89RJdcGZO9JMXv4inBFIEuMAMlGPxzcroEx+ehDXyGR0asw7CooV2DCfiEJlIsKz LcPZew== -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.