SSL certificate
TLSv1.3riachuelo.com.br · 104.97.14.138:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=BR ST=São Paulo L=São Paulo O=Lojas Riachuelo SA CN=riachuelo.com.br
- Issuer
- C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
- Valid from
- 2026-09-15T00:00:00+00:00
- Expires
- 2027-04-01T23:59:59+00:00
- Days remaining
- 152
- Serial (hex)
- 0C9AEFFCF53DD6EDAF2B1F9C5A915C8F
- Signature
- ecdsa-with-SHA384
- Public key
- EC 256 prime256v1
Subject alternative names (SAN)
DNS:riachuelo.com.br, DNS:*.bancomidway.com.br, DNS:*.dev.bancomidway.com.br, DNS:*.dev.midway.com.br, DNS:*.dev.rchlo.io, DNS:*.fanlab.com.br, DNS:*.fotos-riachuelo.com.br, DNS:*.guararapes.ind.br, DNS:*.institutoriachuelo.org.br, DNS:*.lojasriachuelo.com.br, DNS:*.midway.com.br, DNS:*.midwayfinanceira.com.br, DNS:*.mktp-fin.midway.com.br, DNS:*.oficinadetalentos.com.br, DNS:*.physicalpoints.riachuelo.com.br, DNS:*.prd.rchlo.io, DNS:*.qa.bancomidway.com.br, DNS:*.rchlo.io, DNS:*.riachuelo.com, DNS:*.riachuelo.com.br, DNS:*.riachuelo.io, DNS:*.riachuelofashionclub.com.br, DNS:*.sourchlover.com.br, DNS:*.uat.midway.com.br, DNS:*.uat.rchlo.io, DNS:*.xodo.com.br, DNS:admin.mktp-fin-uat.midway.com.br, DNS:api-refunds.inovarh.rchlo.io, DNS:api.bacen.bancomidway.com.br, DNS:api.collection.bancomidway.com.br, DNS:api.credit.bancomidway.com.br, DNS:api.dev.bacen.bancomidway.com.br, DNS:api.dev.collection.bancomidway.com.br, DNS:api.dev.recovery.bancomidway.com.br, DNS:api.h5o.rchlo.io, DNS:api.orders.riachuelo.com.br, DNS:api.payments-uat.riachuelo.com.br, DNS:api.payments.riachuelo.com.br, DNS:api.recovery.bancomidway.com.br, DNS:api.uat.bacen.bancomidway.com.br, DNS:api.uat.collection.bancomidway.com.br, DNS:api.uat.credit.bancomidway.com.br, DNS:api.uat.recovery.bancomidway.com.br, DNS:auth.uat.openbanking.midway.com.br, DNS:etiquetasfornecedor.uat.riachuelo.com.br, DNS:fanlab.com.br, DNS:gateway.developer.rchlo.io, DNS:institutoriachuelo.org.br, DNS:oaf.consumer.rchlo.io, DNS:oaf.provider.rchlo.io, DNS:oficinadetalentos.com.br, DNS:privacidade.grupoguararapes.com.br, DNS:qa.opera.guararapes.ind.br, DNS:rchlo.love, DNS:rfid.api-uat.rchlo.io, DNS:rfid.api.rchlo.io, DNS:riachuelo.com, DNS:riachuelofashionclub.com.br, DNS:riaclub.com.br, DNS:sourchlover.com.br, DNS:universidaderm.com.br, DNS:www.babyway.com.br, DNS:www.casariachuelo.com.br, DNS:www.riaclub.com.br, DNS:www.universidaderm.com.br, DNS:xodo.com.br
SHA-256 fingerprint
C5:D8:71:24:F0:A3:9E:EB:58:22:1C:DC:EC:38:CA:4A:66:BC:8D:24:79:F7:45:7C:DF:B4:D5:4E:8A:BD:0F:17
Certificate extensions & PEM
- authorityKeyIdentifier
- 8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
- subjectKeyIdentifier
- F6:72:09:8B:9E:74:5D:24:41:85:58:6E:A4:5E:74:F2:BA:DE:B8:24
- subjectAltName
- DNS:riachuelo.com.br, DNS:*.bancomidway.com.br, DNS:*.dev.bancomidway.com.br, DNS:*.dev.midway.com.br, DNS:*.dev.rchlo.io, DNS:*.fanlab.com.br, DNS:*.fotos-riachuelo.com.br, DNS:*.guararapes.ind.br, DNS:*.institutoriachuelo.org.br, DNS:*.lojasriachuelo.com.br, DNS:*.midway.com.br, DNS:*.midwayfinanceira.com.br, DNS:*.mktp-fin.midway.com.br, DNS:*.oficinadetalentos.com.br, DNS:*.physicalpoints.riachuelo.com.br, DNS:*.prd.rchlo.io, DNS:*.qa.bancomidway.com.br, DNS:*.rchlo.io, DNS:*.riachuelo.com, DNS:*.riachuelo.com.br, DNS:*.riachuelo.io, DNS:*.riachuelofashionclub.com.br, DNS:*.sourchlover.com.br, DNS:*.uat.midway.com.br, DNS:*.uat.rchlo.io, DNS:*.xodo.com.br, DNS:admin.mktp-fin-uat.midway.com.br, DNS:api-refunds.inovarh.rchlo.io, DNS:api.bacen.bancomidway.com.br, DNS:api.collection.bancomidway.com.br, DNS:api.credit.bancomidway.com.br, DNS:api.dev.bacen.bancomidway.com.br, DNS:api.dev.collection.bancomidway.com.br, DNS:api.dev.recovery.bancomidway.com.br, DNS:api.h5o.rchlo.io, DNS:api.orders.riachuelo.com.br, DNS:api.payments-uat.riachuelo.com.br, DNS:api.payments.riachuelo.com.br, DNS:api.recovery.bancomidway.com.br, DNS:api.uat.bacen.bancomidway.com.br, DNS:api.uat.collection.bancomidway.com.br, DNS:api.uat.credit.bancomidway.com.br, DNS:api.uat.recovery.bancomidway.com.br, DNS:auth.uat.openbanking.midway.com.br, DNS:etiquetasfornecedor.uat.riachuelo.com.br, DNS:fanlab.com.br, DNS:gateway.developer.rchlo.io, DNS:institutoriachuelo.org.br, DNS:oaf.consumer.rchlo.io, DNS:oaf.provider.rchlo.io, DNS:oficinadetalentos.com.br, DNS:privacidade.grupoguararapes.com.br, DNS:qa.opera.guararapes.ind.br, DNS:rchlo.love, DNS:rfid.api-uat.rchlo.io, DNS:rfid.api.rchlo.io, DNS:riachuelo.com, DNS:riachuelofashionclub.com.br, DNS:riaclub.com.br, DNS:sourchlover.com.br, DNS:universidaderm.com.br, DNS:www.babyway.com.br, DNS:www.casariachuelo.com.br, DNS:www.riaclub.com.br, DNS:www.universidaderm.com.br, DNS:xodo.com.br
- certificatePolicies
- Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Agreement
- extendedKeyUsage
- TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 15 18:53:50.100 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:63:12:6C:D4:13:89:A8:06:3C:14:82:49: 9C:2B:DC:3D:7A:35:7B:D1:6C:78:C3:2F:63:17:60:AB: 79:CB:2A:40:02:20:0B:98:F2:CB:29:31:BB:55:57:C7: 15:36:AF:7E:1B:E9:2E:BE:24:B6:09:F6:FF:1B:FD:73: 70:BB:8F:E0:6C:46 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Sep 15 18:53:50.071 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:C1:45:13:02:F5:04:BC:CC:AA:71:9C: 8D:7E:C6:46:B1:6C:B0:F2:D0:A4:F0:04:16:CE:C2:5C: EF:2D:E6:BB:97:02:20:68:65:1B:D3:5E:E6:7A:38:1E: 7A:63:6A:96:20:C6:91:E5:74:E1:08:D8:1D:F1:32:F0: 70:25:FD:4B:C4:F9:BE Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Sep 15 18:53:50.127 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:BB:44:79:4F:7B:A8:EC:36:9F:B9:1B: 00:F2:F7:63:95:5E:93:4E:80:05:F4:F2:9B:49:5C:40: 9B:F9:BA:1C:C4:02:21:00:EA:67:F6:47:33:B3:00:56: DF:17:69:03:CD:43:FA:0D:13:ED:E4:B5:22:00:75:53: 75:C6:B8:FD:0E:10:3E:E7
-----BEGIN CERTIFICATE----- MIIL5jCCC22gAwIBAgIQDJrv/PU91u2vKx+cWpFcjzAKBggqhkjOPQQDAzBZMQsw CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdp Q2VydCBHbG9iYWwgRzMgVExTIEVDQyBTSEEzODQgMjAyMCBDQTEwHhcNMjYwOTE1 MDAwMDAwWhcNMjcwNDAxMjM1OTU5WjBvMQswCQYDVQQGEwJCUjETMBEGA1UECAwK U8OjbyBQYXVsbzETMBEGA1UEBwwKU8OjbyBQYXVsbzEbMBkGA1UEChMSTG9qYXMg UmlhY2h1ZWxvIFNBMRkwFwYDVQQDExByaWFjaHVlbG8uY29tLmJyMFkwEwYHKoZI zj0CAQYIKoZIzj0DAQcDQgAE5r9z2/or7JcPGAvoXrq3WoNrXdnypSNRfqf+EkJZ t1KKbWPeKlsA+QKwDNfSL2uhRGfTxGRkxrqZ/WzSiHWFyqOCCf8wggn7MB8GA1Ud IwQYMBaAFIoj655r1/k3XfltITl2mqFn3hCoMB0GA1UdDgQWBBT2cgmLnnRdJEGF WG6kXnTyut64JDCCBpYGA1UdEQSCBo0wggaJghByaWFjaHVlbG8uY29tLmJyghQq LmJhbmNvbWlkd2F5LmNvbS5icoIYKi5kZXYuYmFuY29taWR3YXkuY29tLmJyghMq LmRldi5taWR3YXkuY29tLmJygg4qLmRldi5yY2hsby5pb4IPKi5mYW5sYWIuY29t LmJyghgqLmZvdG9zLXJpYWNodWVsby5jb20uYnKCEyouZ3VhcmFyYXBlcy5pbmQu YnKCGyouaW5zdGl0dXRvcmlhY2h1ZWxvLm9yZy5icoIXKi5sb2phc3JpYWNodWVs by5jb20uYnKCDyoubWlkd2F5LmNvbS5icoIZKi5taWR3YXlmaW5hbmNlaXJhLmNv bS5icoIYKi5ta3RwLWZpbi5taWR3YXkuY29tLmJyghoqLm9maWNpbmFkZXRhbGVu dG9zLmNvbS5icoIhKi5waHlzaWNhbHBvaW50cy5yaWFjaHVlbG8uY29tLmJygg4q LnByZC5yY2hsby5pb4IXKi5xYS5iYW5jb21pZHdheS5jb20uYnKCCioucmNobG8u aW+CDyoucmlhY2h1ZWxvLmNvbYISKi5yaWFjaHVlbG8uY29tLmJygg4qLnJpYWNo dWVsby5pb4IdKi5yaWFjaHVlbG9mYXNoaW9uY2x1Yi5jb20uYnKCFCouc291cmNo bG92ZXIuY29tLmJyghMqLnVhdC5taWR3YXkuY29tLmJygg4qLnVhdC5yY2hsby5p b4INKi54b2RvLmNvbS5icoIgYWRtaW4ubWt0cC1maW4tdWF0Lm1pZHdheS5jb20u YnKCHGFwaS1yZWZ1bmRzLmlub3ZhcmgucmNobG8uaW+CHGFwaS5iYWNlbi5iYW5j b21pZHdheS5jb20uYnKCIWFwaS5jb2xsZWN0aW9uLmJhbmNvbWlkd2F5LmNvbS5i coIdYXBpLmNyZWRpdC5iYW5jb21pZHdheS5jb20uYnKCIGFwaS5kZXYuYmFjZW4u YmFuY29taWR3YXkuY29tLmJygiVhcGkuZGV2LmNvbGxlY3Rpb24uYmFuY29taWR3 YXkuY29tLmJygiNhcGkuZGV2LnJlY292ZXJ5LmJhbmNvbWlkd2F5LmNvbS5icoIQ YXBpLmg1by5yY2hsby5pb4IbYXBpLm9yZGVycy5yaWFjaHVlbG8uY29tLmJygiFh cGkucGF5bWVudHMtdWF0LnJpYWNodWVsby5jb20uYnKCHWFwaS5wYXltZW50cy5y aWFjaHVlbG8uY29tLmJygh9hcGkucmVjb3ZlcnkuYmFuY29taWR3YXkuY29tLmJy giBhcGkudWF0LmJhY2VuLmJhbmNvbWlkd2F5LmNvbS5icoIlYXBpLnVhdC5jb2xs ZWN0aW9uLmJhbmNvbWlkd2F5LmNvbS5icoIhYXBpLnVhdC5jcmVkaXQuYmFuY29t aWR3YXkuY29tLmJygiNhcGkudWF0LnJlY292ZXJ5LmJhbmNvbWlkd2F5LmNvbS5i coIiYXV0aC51YXQub3BlbmJhbmtpbmcubWlkd2F5LmNvbS5icoIoZXRpcXVldGFz Zm9ybmVjZWRvci51YXQucmlhY2h1ZWxvLmNvbS5icoINZmFubGFiLmNvbS5icoIa Z2F0ZXdheS5kZXZlbG9wZXIucmNobG8uaW+CGWluc3RpdHV0b3JpYWNodWVsby5v cmcuYnKCFW9hZi5jb25zdW1lci5yY2hsby5pb4IVb2FmLnByb3ZpZGVyLnJjaGxv LmlvghhvZmljaW5hZGV0YWxlbnRvcy5jb20uYnKCInByaXZhY2lkYWRlLmdydXBv Z3VhcmFyYXBlcy5jb20uYnKCGnFhLm9wZXJhLmd1YXJhcmFwZXMuaW5kLmJyggpy Y2hsby5sb3ZlghVyZmlkLmFwaS11YXQucmNobG8uaW+CEXJmaWQuYXBpLnJjaGxv Lmlvgg1yaWFjaHVlbG8uY29tghtyaWFjaHVlbG9mYXNoaW9uY2x1Yi5jb20uYnKC DnJpYWNsdWIuY29tLmJyghJzb3VyY2hsb3Zlci5jb20uYnKCFXVuaXZlcnNpZGFk ZXJtLmNvbS5icoISd3d3LmJhYnl3YXkuY29tLmJyghh3d3cuY2FzYXJpYWNodWVs by5jb20uYnKCEnd3dy5yaWFjbHViLmNvbS5icoIZd3d3LnVuaXZlcnNpZGFkZXJt LmNvbS5icoILeG9kby5jb20uYnIwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggr BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQE AwIDiDATBgNVHSUEDDAKBggrBgEFBQcDATCBnwYDVR0fBIGXMIGUMEigRqBEhkJo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHM1RMU0VDQ1NI QTM4NDIwMjBDQTEtMi5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9EaWdpQ2VydEdsb2JhbEczVExTRUNDU0hBMzg0MjAyMENBMS0yLmNybDCBhwYI KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEdsb2JhbEczVExTRUNDU0hBMzg0MjAyMENBMS0yLmNydDAMBgNVHRMBAf8E AjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQBMY9yY5Zwdq4j2Hoo93q6P q0SjN3tfm5TD+6Gc/MG+JgAAAaCmaxKUAAAEAwBGMEQCIGMSbNQTiagGPBSCSZwr 3D16NXvRbHjDL2MXYKt5yypAAiALmPLLKTG7VVfHFTavfhvpLr4ktgn2/xv9c3C7 j+BsRgB2ANbVjanQF1Pzakqgx1dJAq/rx9ws04zZ92TIDIkZHp8CAAABoKZrEncA AAQDAEcwRQIhAMFFEwL1BLzMqnGcjX7GRrFssPLQpPAEFs7CXO8t5ruXAiBoZRvT XuZ6OB56Y2qWIMaR5XThCNgd8TLwcCX9S8T5vgB3AETCvQzpFA5kpclKAZMKWqG7 NZcOAO4RFoloKhxE17VmAAABoKZrEq8AAAQDAEgwRgIhALtEeU97qOw2n7kbAPL3 Y5Vek06ABfTym0lcQJv5uhzEAiEA6mf2RzOzAFbfF2kDzUP6DRPt5LUiAHVTdca4 /Q4QPucwCgYIKoZIzj0EAwMDZwAwZAIwFwEcUy7rUpURJch52+E7v9VTNA/SaGlm VvOcIHaXSb+4JrnqZGTZ1QdkpY1WaxylAjA1ivtmeto32d3Cl2TImQxTOPMr+Owj 1rupUqJz+o7NtepI5VPUWNQXxCzGoNVauWY= -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-31T12:03:32+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=US O=DigiCert Inc CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G3
- Valid from
- 2021-04-14T00:00:00+00:00
- Expires
- 2031-04-13T23:59:59+00:00
- Days remaining
- 1625
- Serial (hex)
- 0B00E92D4D6D731FCA3059C7CB1E1886
- Signature
- ecdsa-with-SHA384
- Public key
- EC 384 secp384r1
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
05:87:D6:BD:28:19:58:7A:B9:0F:B5:96:48:0A:57:93:BD:9F:75:06:A3:EA:CE:73:F5:EA:B3:66:01:7F:E2:59
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- subjectKeyIdentifier
- 8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8
- authorityKeyIdentifier
- B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl
- certificatePolicies
- Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE----- MIIDeTCCAv+gAwIBAgIQCwDpLU1tcx/KMFnHyx4YhjAKBggqhkjOPQQDAzBhMQsw CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe Fw0yMTA0MTQwMDAwMDBaFw0zMTA0MTMyMzU5NTlaMFkxCzAJBgNVBAYTAlVTMRUw EwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2JhbCBH MyBUTFMgRUNDIFNIQTM4NCAyMDIwIENBMTB2MBAGByqGSM49AgEGBSuBBAAiA2IA BHipnHWuiF1jpK1dhtgQSdavklljQyOF9EhlMM1KNJWmDj7ZfAjXVwUoSJ4Lq+vC 05ae7UXSi4rOAUsXQ+Fzz21zSDTcAEYJtVZUyV96xxMH0GwYF2zK28cLJlYujQf1 Z6OCAYIwggF+MBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFIoj655r1/k3 XfltITl2mqFn3hCoMB8GA1UdIwQYMBaAFLPbSKT5ocXYrjZBzBFjaWIpvEvGMA4G A1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEdsb2JhbFJvb3RHMy5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEczLmNybDA9BgNVHSAE NjA0MAsGCWCGSAGG/WwCATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgG BmeBDAECAzAKBggqhkjOPQQDAwNoADBlAjB+Jlhu7ojsDN0VQe56uJmZcNFiZU+g IJ5HsVvBsmcxHcxyeq8ickBCbmWE/odLDxkCMQDmv9auNIdbP2fHHahv1RJ4teaH MUSpXca4eMzP79QyWBH/OoUGPB2Eb9P1+dozHKQ= -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.