SSL certificate
TLSv1.3webasto.com · 151.101.3.10:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=DE ST=Bayern O=Webasto SE CN=webasto.com
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
- Valid from
- 2026-03-05T00:00:00+00:00
- Expires
- 2027-03-05T23:59:59+00:00
- Days remaining
- 144
- Serial (hex)
- 607E3830B506E83030C9871C18DAA346
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:webasto.com, DNS:preview-prod.webasto.com, DNS:publish-dev.webasto.com, DNS:publish-stage.webasto.com, DNS:www.webasto.com
SHA-256 fingerprint
F5:B5:5A:D5:CD:28:C4:ED:0F:57:84:B1:26:34:35:19:9C:D6:EA:BD:33:0C:15:17:86:A2:09:B0:63:EE:05:62
Certificate extensions & PEM
- authorityKeyIdentifier
- E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
- subjectKeyIdentifier
- 81:B6:67:C6:56:CE:60:91:9C:17:20:3B:7B:5A:3F:77:4D:A6:73:84
- keyUsage
- Digital Signature, Key Encipherment
- basicConstraints
- CA:FALSE
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Mar 5 11:36:08.236 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A3:C0:EE:24:B2:9A:B2:FC:A7:F9:32: E0:75:0C:D1:15:DC:40:BD:28:35:0E:75:04:6D:93:C2: 5B:36:BB:45:60:02:21:00:DA:2F:52:D3:CD:64:13:13: 6F:27:B1:3F:A9:ED:04:CA:B5:D9:A6:E6:FA:67:CF:C0: 04:17:EC:C7:7E:A8:1F:9E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Mar 5 11:36:08.774 2026 GMT Extensions: 00:00:05:00:03:06:76:A0 Signature : ecdsa-with-SHA256 30:46:02:21:00:D2:54:AC:E7:0F:40:46:1E:EA:D4:83: 26:A7:DD:C4:09:D7:4D:FA:F1:11:4E:89:FF:F2:E5:1A: C4:71:63:C4:4A:02:21:00:C8:66:7F:27:90:8F:24:95: 8F:B0:5E:FE:DE:4D:AE:4D:63:8D:17:5B:0B:4D:6D:9E: 7E:98:78:7D:70:08:DE:3D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Mar 5 11:36:08.034 2026 GMT Extensions: 00:00:05:00:00:32:2D:05 Signature : ecdsa-with-SHA256 30:45:02:20:58:59:F8:F7:62:43:BE:07:89:58:22:44: EC:E7:47:AF:3A:B4:FE:8D:50:FE:10:9B:B4:1F:13:D1: 2F:A4:C3:14:02:21:00:AE:14:B2:0C:C5:A8:DB:F3:5C: AC:4A:E7:99:EB:42:EF:BB:38:06:2C:0B:CE:D6:8B:FF: 17:AF:78:26:8E:33:21
- subjectAltName
- DNS:webasto.com, DNS:preview-prod.webasto.com, DNS:publish-dev.webasto.com, DNS:publish-stage.webasto.com, DNS:www.webasto.com
-----BEGIN CERTIFICATE----- MIIHYDCCBcigAwIBAgIQYH44MLUG6DAwyYccGNqjRjANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgT1YgUjM2 MB4XDTI2MDMwNTAwMDAwMFoXDTI3MDMwNTIzNTk1OVowSTELMAkGA1UEBhMCREUx DzANBgNVBAgTBkJheWVybjETMBEGA1UEChMKV2ViYXN0byBTRTEUMBIGA1UEAxML d2ViYXN0by5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp1MKl yFKqMqVWtCwe947fCE8nH+3Fg+f4/B1e3o4rwZNaApYMbv1kAA9XIzMDqiSJm+79 QERmu/ygFVblFZPXTxp2PKysM+6CenEsKKp4zu3uaNns38rD9UsMIdAsqfd5LkdQ dx5k2TQMxq1Gi53uTY3hy1XTThpv/nL+dqoYQEFLXZHOUiyJ6ujnmuJrDUvihjHa WgTOfQLJgmjMrc6fbbVmMu3uV8TLANyvN3bgScx6fAR63kr1aueO5FKPJ9xwZHrJ qhPETrfCLBs88HYxX23jhXxhW+qmx5qWKlXKmJfd2XVNpTM11fMMFETGrJBHNx1J uAgE31rymKgRSeORAgMBAAGjggOrMIIDpzAfBgNVHSMEGDAWgBTjZnS7cGiNLF1O DqZKj5s3IpyCkjAdBgNVHQ4EFgQUgbZnxlbOYJGcFyA7e1o/d02mc4QwDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwSgYD VR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9z ZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6 Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0 aW9uQ0FPVlIzNi5jcmwwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0 cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUHVibGljU2VydmVyQXV0aGVudGlj YXRpb25DQU9WUjM2LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGln by5jb20wggGQBgorBgEEAdZ5AgQCBIIBgASCAXwBegB3AByfaCzp+vBFaVD4G5aK h93bMhDYTObIsuOCUkrEz1mfAAABnL3IoSwAAAQDAEgwRgIhAKPA7iSymrL8p/ky 4HUM0RXcQL0oNQ51BG2Twls2u0VgAiEA2i9S081kExNvJ7E/qe0EyrXZpub6Z8/A BBfsx36oH54AfwCOykcLrN5q86IGsKR6hLdG/h/Gv5U+JeabTuQCSPPG6AAAAZy9 yKNGAAgAAAUAAwZ2oAQDAEgwRgIhANJUrOcPQEYe6tSDJqfdxAnXTfrxEU6J//Ll GsRxY8RKAiEAyGZ/J5CPJJWPsF7+3k2uTWONF1sLTW2efph4fXAI3j0AfgBZbmwz hpSyWXKiVsig6N2QSnboCD3ahzsBCDgoFDzuWQAAAZy9yKBiAAgAAAUAADItBQQD AEcwRQIgWFn492JDvgeJWCJE7OdHrzq0/o1Q/hCbtB8T0S+kwxQCIQCuFLIMxajb 81ysSueZ60LvuzgGLAvO1ov/F694Jo4zITB1BgNVHREEbjBsggt3ZWJhc3RvLmNv bYIYcHJldmlldy1wcm9kLndlYmFzdG8uY29tghdwdWJsaXNoLWRldi53ZWJhc3Rv LmNvbYIZcHVibGlzaC1zdGFnZS53ZWJhc3RvLmNvbYIPd3d3LndlYmFzdG8uY29t MA0GCSqGSIb3DQEBCwUAA4IBgQADGqq1j5tjYXa44UDQL5dtIGExXETwy3SYfMqz wWljxF/shWTyv7SMwMpq7OmbYWV5esw4diEnijvDSa6ZjATZ6d0DAvXTCZNnPOXG Jh5PEQi9XoQywQuyXBarZrajdpuajB6iQbtnbWgyhH2/vFS7vkO4JR5y3+F/SfT4 h5lkWjDNBnXry73A5RXXsXYyknanKkWQie7ix5QlHRh8X9I99dJqso59VQTHC+Fa GPjNA7eLI71pnLLyfi0nUMFHl0JqCjpapyiZGGIATl11yg7PY5GwY4o07Fx3RgjQ d5CdVTZmkpRO0Rl+JY4RxiP4jJbWQa6FqnXEpf2qi81UAeoOmYigB2cwCtR7Nij8 HII7aPpQre5wxpBVnD7WDptEHKNUEZuGr5VhZAY9lkbLdqGaMA49JIeoxVgVJrVu iVVAv1KRR5JbQr9a9DxnfCPq2g/TYMoY1Jwlw6s8L8gbU8xycWwbk+s/aofAuwFT /bL0Flx9nLlYekCHnh4Mh4j3Ye0= -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-12T18:39:53+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2036-03-21T23:59:59+00:00
- Days remaining
- 3448
- Serial (hex)
- 2C1A3C76E943DDDDFF191B31890AED71
- Signature
- RSA-SHA384
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
- authorityKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- subjectKeyIdentifier
- E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:0
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE----- MIIGTDCCBDSgAwIBAgIQLBo8dulD3d3/GRsxiQrtcTANBgkqhkiG9w0BAQwFADBf MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgT1YgUjM2MIIBojANBgkqhkiG9w0B AQEFAAOCAY8AMIIBigKCAYEApkMtJ3R06jo0fceI0M52B7K+TyMeGcv2BQ5AVc3j lYt76TvHIu/nNe22W/RJXX9rWUD/2GE6GF5x0V4bsY7K3IeJ8E7+KzG/TGboySfD u+F52jqQBbY62ofhYjMeiAbLI02+FqwHeM8uIrUtcX8b2RCxF358TB0NHVccAXZc FYgZndZCeXxjuca7pJJ20LLUnXtgXcjAE1vY4WvbReW0W6mkeZyNGdmpTcFs5Y+s yy6LtE5Zocji9J9NlNnReox2RWVyEXpA1ChZ4gqN+ZpVSIQ0HBorVFbBKyhdZyEX gZgNSNtBRwxqwIzJePJhYd4ZUhO1vk+/uP3nwDk0p95q/j7naXNCSvESnrHPypaB WRK066nKfPRPi9m9kIOhMdYfS8giFRTcdgL24Ycilj7ecAK9Trh0VbjwouJ4WH+x bt47u68ZFCD/ac55I0DNHkCpaPruj6e9Rmr7K46wZDAYXuEAqB7tGG/jd6JAA+H2 O44CV98NRsU213f1kScIZntNAgMBAAGjggGBMIIBfTAfBgNVHSMEGDAWgBRWc1hk lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQU42Z0u3BojSxdTg6mSo+bNyKcgpIw DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgIw VAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdv UHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290UjQ2LmNybDCBhAYIKwYBBQUH AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYucDdjMCMGCCsGAQUF BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA BZXWDHWC3cubb/e1I1kzi8lPFiK/ZUoH09ufmVOrc5ObYH/XKkWUexSPqRkwKFKr 7r8OuG+p7VNB8rifX6uopqKAgsvZtZsq7iAFw04To6vNcxeBt1Eush3cQ4b8nbQR MQLChgEAqwhuXp9P48T4QEBSksYav7+aFjNySsLYlPzNqVM3RNwvBdvp6vgDtGwc xlKQZVuuNVIaoYyls8swhxDeSHKpRdxRauTLZ+pl+wGvy0pnrLEJGSz9mOEmfbod e/XopR2NGqaHJ6bIjyxPu6UtyQGI26En7UAEozACrHz06Nx2jTAY9E6NeB6XuobE wLK025ZRmvglcURG1BrV24tGHHTgxCe8M3oGlpUSMTKQ2dkgljZVYt+gKdFtWELZ MuRdi+X3XsrR8LFz+aLUiDRfQqhmw3RxjIyVKvvu9UPYY1nsvxYmFnUSeM+2q1z/ iPUry+xDY9MC6+IhleKT094VKdFVp7LXH42+wvU+17lRolQ2mK2N/nBLVBwaIhib QXw4VYKwB86Bc6eS6iqsc94KEgD/U4VsjmgfhK+Xp4NM+VYzTTa3QeV3p8xOM0cw q1p8oZFA+OBcz3FYWpDIe5j0NWKlw9hXsTyPY/HeZUV59akskSOSRSmDfe8wJDPX 58uB9/7lud0G3x0pxQAcffP0ayKavNwDTw4UfJ34cEw= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Issuer
- C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2038-01-18T23:59:59+00:00
- Days remaining
- 4116
- Serial (hex)
- D27FBBC1DE359E5216AD6149586099C4
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
- authorityKeyIdentifier
- 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
- subjectKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy
- crlDistributionPoints
- Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE----- MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR 8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34 MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr +vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1 BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0 S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24 RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1 VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb 9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2 Rnnyp58XRStJ -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.