{"ok":true,"cached":false,"status":"ok","tool":"ssl-trace","result":{"status":"ok","title":"TLS handshake trace for example.com:443","titleKey":"ssltrace","titleVars":{"host":"example.com","port":443},"query":"example.com","table":null,"fields":[{"label":"Target","value":"example.com:443 (172.66.147.243)","type":"text"},{"label":"Protocol / cipher","value":"TLSv1.3 · TLS_AES_256_GCM_SHA384 · ALPN h2","type":"text"}],"checks":[{"level":"pass","title":"Handshake completed","detail":"Negotiated TLSv1.3 with TLS_AES_256_GCM_SHA384."},{"level":"info","title":"Handshake trace","detail":"Captured 7 handshake record(s)."}],"sections":[{"id":"msg-0","title":"Sent TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.0 (0x301)\n Content Type = Handshake (22)\n Length = 1601\n ClientHello, Length=1597\n client_version=0x303 (TLS 1.2)\n Random:\n gmt_unix_time=0x95AD7D4D\n random_bytes (len=28): 16B31A0A27C8E3727301FE2FAE33C094ADA6A71D331288348FF6A82F\n session_id (len=32): A1E0CDE646BE378B901355AB7F2A33652F574E89709AC7B5D1E796A46330A02E\n cipher_suites (len=104)\n {0x13, 0x02} TLS_AES_256_GCM_SHA384\n {0x13, 0x03} TLS_CHACHA20_POLY1305_SHA256\n {0x13, 0x01} TLS_AES_128_GCM_SHA256\n {0xC0, 0x2F} TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x2B} TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x30} TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384\n {0xC0, 0x2C} TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384\n {0x00, 0x9E} TLS_DHE_RSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x27} TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256\n {0x00, 0x67} TLS_DHE_RSA_WITH_AES_128_CBC_SHA256\n {0xC0, 0x28} TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384\n {0x00, 0x6B} TLS_DHE_RSA_WITH_AES_256_CBC_SHA256\n {0x00, 0xA3} TLS_DHE_DSS_WITH_AES_256_GCM_SHA384\n {0x00, 0x9F} TLS_DHE_RSA_WITH_AES_256_GCM_SHA384\n {0xCC, 0xA9} TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256\n {0xCC, 0xA8} TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256\n {0xCC, 0xAA} TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256\n {0xC0, 0xAD} TLS_ECDHE_ECDSA_WITH_AES_256_CCM\n {0xC0, 0x9F} TLS_DHE_RSA_WITH_AES_256_CCM\n {0xC0, 0x5D} TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384\n {0xC0, 0x61} TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384\n {0xC0, 0x57} TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384\n {0xC0, 0x53} TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384\n {0x00, 0xA2} TLS_DHE_DSS_WITH_AES_128_GCM_SHA256\n {0xC0, 0xAC} TLS_ECDHE_ECDSA_WITH_AES_128_CCM\n {0xC0, 0x9E} TLS_DHE_RSA_WITH_AES_128_CCM\n {0xC0, 0x5C} TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x60} TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x56} TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x52} TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x24} TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384\n {0x00, 0x6A} TLS_DHE_DSS_WITH_AES_256_CBC_SHA256\n {0xC0, 0x23} TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256\n {0x00, 0x40} TLS_DHE_DSS_WITH_AES_128_CBC_SHA256\n {0xC0, 0x0A} TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA\n {0xC0, 0x14} TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA\n {0x00, 0x39} TLS_DHE_RSA_WITH_AES_256_CBC_SHA\n {0x00, 0x38} TLS_DHE_DSS_WITH_AES_256_CBC_SHA\n {0xC0, 0x09} TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA\n {0xC0, 0x13} TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA\n {0x00, 0x33} TLS_DHE_RSA_WITH_AES_128_CBC_SHA\n {0x00, 0x32} TLS_DHE_DSS_WITH_AES_128_CBC_SHA\n {0x00, 0x9D} TLS_RSA_WITH_AES_256_GCM_SHA384\n {0xC0, 0x9D} TLS_RSA_WITH_AES_256_CCM\n {0xC0, 0x51} TLS_RSA_WITH_ARIA_256_GCM_SHA384\n {0x00, 0x9C} TLS_RSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x9C} TLS_RSA_WITH_AES_128_CCM\n {0xC0, 0x50} TLS_RSA_WITH_ARIA_128_GCM_SHA256\n {0x00, 0x3D} TLS_RSA_WITH_AES_256_CBC_SHA256\n {0x00, 0x3C} TLS_RSA_WITH_AES_128_CBC_SHA256\n {0x00, 0x35} TLS_RSA_WITH_AES_256_CBC_SHA\n {0x00, 0x2F} TLS_RSA_WITH_AES_128_CBC_SHA\n compression_methods (len=1)\n No Compression (0x00)\n extensions, length = 1420\n extension_type=renegotiate(65281), length=1\n \n extension_type=server_name(0), length=16\n 0000 - 00 0e 00 00 0b 65 78 61-6d 70 6c 65 2e 63 6f .....example.co\n 000f - 6d m\n extension_type=ec_point_formats(11), length=4\n uncompressed (0)\n ansiX962_compressed_prime (1)\n ansiX962_compressed_char2 (2)\n extension_type=supported_groups(10), length=18\n X25519MLKEM768 (4588)\n ecdh_x25519 (29)\n secp256r1 (P-256) (23)\n ecdh_x448 (30)\n secp384r1 (P-384) (24)\n secp521r1 (P-521) (25)\n ffdhe2048 (256)\n ffdhe3072 (257)\n extension_type=session_ticket(35), length=0\n extension_type=application_layer_protocol_negotiation(16), length=14\n h2\n http/1.1\n extension_type=encrypt_then_mac(22), length=0\n extension_type=extended_master_secret(23), length=0\n extension_type=signature_algorithms(13), length=54\n mldsa65 (0x0905)\n mldsa87 (0x0906)\n mldsa44 (0x0904)\n ecdsa_secp256r1_sha256 (0x0403)\n ecdsa_secp384r1_sha384 (0x0503)\n ecdsa_secp521r1_sha512 (0x0603)\n ed25519 (0x0807)\n ed448 (0x0808)\n ecdsa_brainpoolP256r1tls13_sha256 (0x081a)\n ecdsa_brainpoolP384r1tls13_sha384 (0x081b)\n ecdsa_brainpoolP512r1tls13_sha512 (0x081c)\n rsa_pss_pss_sha256 (0x0809)\n rsa_pss_pss_sha384 (0x080a)\n rsa_pss_pss_sha512 (0x080b)\n rsa_pss_rsae_sha256 (0x0804)\n rsa_pss_rsae_sha384 (0x0805)\n rsa_pss_rsae_sha512 (0x0806)\n rsa_pkcs1_sha256 (0x0401)\n rsa_pkcs1_sha384 (0x0501)\n rsa_pkcs1_sha512 (0x0601)\n ecdsa_sha224 (0x0303)\n rsa_pkcs1_sha224 (0x0301)\n dsa_sha224 (0x0302)\n dsa_sha256 (0x0402)\n dsa_sha384 (0x0502)\n dsa_sha512 (0x0602)\n extension_type=supported_versions(43), length=5\n TLS 1.3 (772)\n TLS 1.2 (771)\n extension_type=psk_key_exchange_modes(45), length=2\n psk_dhe_ke (1)\n extension_type=key_share(51), length=1258\n NamedGroup: X25519MLKEM768 (4588)\n key_exchange: (len=1216): D9131529EC5959361EC2716B4E70AC37F13E79C46FBC37B7951B0E1E83B427A3BC816C7123E14E53364B33D6B7F8F69C35B47FA65B0330F5415EB0B1EB54B35FB79FB7BB1F1308266A43068E57C73465771A5564CF362D1C274345074BD6101C4CD2010345AEE60510A9A45553288B19720D366C851949B2C1FA2016308C6A77BB2E11193DE3135F048D1DBB620513435A564C2C99C5C4AC7AAAD82B7DBB43F4849DE3801311C76F1C7957EF7C79625704DDEC918910ADB2B213F6FBC00354293245A4D5F35B49068A7BF65BE719322AA8174F54C1253B6962BB5209D2CD028843B58A84D5E85DE4024B6FBCA36BC1AA31B661A148443E45A64D303256C0769D341DE9080FCE55519EA11E3B9A62CFDCB6C214390596778C9B3190804C73A2013C34BE7E0C807350A6D1F68D3F26B3558381CB746281394E29164827E18A7FB2488DB02EDE347FF532660B0812BB94A73B3C7D9B35B3AFD7504225C90932C1265A2D1F4A1C043A37A98C8EEE695B3DFB0F568491ED320BA12502F7DCA4DA944C82E44EEEE0650DF0C8FF439DC2F343D2F175BF89C2D862C9EA24CC88714D9E507FFBC1AF57FA0ACCBAAF963CC03BC5C7AD1794BF949727F37C16F433D68993DED876938653211A0C725AC308F91A0945AF8F923DD5CC9FAA15421B9B4D44576FE247386866ACA7F5074212B6BE6344E464ADED1645F6453C920B7EF2012995D304C2E35AD1098526B905F55AC1ECA1469ECB6B5A8AABD3B9A11A616221997C0CE167172687ECF2726DB418599C9C4D92C93BC5B41AE3CA8AF0BA193BB9452AC862C8B20888AE7CECB835A7A46ABB00489BBB86B124171A6839F6B424B7162194CD77621D53C0C9D39C1C8B66333690126933A76E2B1ECB38C114BBA381D86EAE0A1F2CF67867C7706E889764461E9FBC463D367F375B5D8A066600D4504EC8291BE23E6513B776C822A61220B887A062A1159B464A61B2CE75BA7ACA52126CA56F1BB91879C6AF3ECC705B6072099C5D6223C12DA5525DB1BE82E02281D10DF49635755A09DA0A7B1B44B7548611FA04B7C0EAC06E5CA284C7719BA77FAD9354274796D36602353176CEF23FFBB61A433A0376D43FC8F6806F1782BE4A8405934DC31089EA83131903C2D0A49F4428AE6DCB36EFE129AF481F1C693014B951CD679B4BA42585A77845565E543BB6CA1AB62C685215225D4E8AB073C25A2DE7CF05C41DCF5A3384721277B5BFCD901E32EB48C0FA854B152685A9309044AB18BB8596DACC22C22AF98B8CCFD7CC7BF47B7807D09C9B2BF91C99144C5C37443D2E5C7099F96D55556F6458C6E6586DA7F6B5851C7CD43011A5656029367E3751874BD8BB1494ACB53431B3C3CECDFA4438C59EEB02310BA9127DF7CA448A5B65B55F3B40846AA4C1D47800E8C17ABB581487AB7827DC1DB97874F4280926D1C2DBC594BF2A5A0FF3B3210C1A4F4679BE956AC5D403AC429D4A3A206A5C88367A50B1909620433429B435D5A4325595522A302EAF0B4EC5C3C6FE16136678393E679AEE9B14E6A93E9DD241F93A4482467C3B29916AF338388B4681B43AC940404B4BC4CB15B7101BBA61E7B88AFC59E826BEEAFBBBBB813D4ED2095D83723D57B03D8A31A52550AE1AD9B163771EA9102269B0FB092B4DE833AF156AA2ACB5A1492823104AF8AA39FEDAE21850116434F1BEE09FDCE4369A0F6ABAE62682C88E0C\n NamedGroup: ecdh_x25519 (29)\n key_exchange: (len=32): 68470A9FA364D1C4E641486A37ADC1CCD8594EBA7A87DF45B01A871BB346D363","type":"mono"}]},{"id":"msg-1","title":"Received TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.2 (0x303)\n Content Type = Handshake (22)\n Length = 1210\n ServerHello, Length=1206\n server_version=0x303 (TLS 1.2)\n Random:\n gmt_unix_time=0x3C23CB50\n random_bytes (len=28): 910F6F7B384EF107C68A7B6C2E3A00756BE9113199B0D18B732B8CD9\n session_id (len=32): A1E0CDE646BE378B901355AB7F2A33652F574E89709AC7B5D1E796A46330A02E\n cipher_suite {0x13, 0x02} TLS_AES_256_GCM_SHA384\n compression_method: No Compression (0x00)\n extensions, length = 1134\n extension_type=key_share(51), length=1124\n NamedGroup: X25519MLKEM768 (4588)\n key_exchange: (len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n extension_type=supported_versions(43), length=2\n TLS 1.3 (772)","type":"mono"}]},{"id":"msg-2","title":"Received TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.2 (0x303)\n Content Type = ChangeCipherSpec (20)\n Length = 1\n change_cipher_spec (1)","type":"mono"}]},{"id":"msg-3","title":"Received TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.2 (0x303)\n Content Type = ApplicationData (23)\n Length = 3853\n Inner Content Type = Handshake (22)\n EncryptedExtensions, Length=15\n extensions, length = 13\n extension_type=server_name(0), length=0\n extension_type=application_layer_protocol_negotiation(16), length=5\n h2\n\n Certificate, Length=3682\n context (len=0): \n certificate_list, length=3678\n ASN.1Cert, length=1002\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 06:24:d0:ab:31:15:58:78:0b:7d:52:13:b9:63:18:31\n Signature Algorithm: ecdsa-with-SHA256\n Issuer: C = US, O = SSL Corporation, CN = Cloudflare TLS Issuing ECC CA 3\n Validity\n Not Before: Jul 29 22:10:08 2026 GMT\n Not After : Oct 27 22:17:21 2026 GMT\n Subject: CN = example.com\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (256 bit)\n pub:\n 04:76:4e:09:a3:dd:b2:cf:45:a5:4d:d1:5b:9d:f0:\n 51:00:52:23:33:dd:9d:81:77:99:6d:8b:7f:6e:86:\n eb:c1:01:1c:a7:f9:1e:89:26:40:42:bf:9e:1d:95:\n 38:b3:cd:a5:01:cc:b9:eb:89:a3:d5:5b:db:b2:b1:\n 82:09:5d:35:62\n ASN1 OID: prime256v1\n NIST CURVE: P-256\n X509v3 extensions:\n X509v3 Basic Constraints: critical\n CA:FALSE\n X509v3 Authority Key Identifier: \n 83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66\n Authority Information Access: \n CA Issuers - URI:http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer\n OCSP - URI:http://o.cf-i.ssl.com\n X509v3 Subject Alternative Name: \n DNS:example.com, DNS:*.example.com\n X509v3 Certificate Policies: \n Policy: 2.23.140.1.2.1\n Policy: 1.3.6.1.4.1.38064.1.3.1.1\n X509v3 Extended Key Usage: \n TLS Web Server Authentication\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://c.cf-i.ssl.com/ae801ed1c55bb579d79208b0d772acfb8cc3a208.crl\n\n X509v3 Key Usage: critical\n Digital Signature\n 1.3.6.1.4.1.44363.44: \n ..\n CT Precertificate SCTs: \n Signed Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n Timestamp : Jul 29 22:20:12.470 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:46:02:21:00:FD:58:5A:2D:44:6C:D6:46:32:D4:A4:\n AB:B9:52:01:55:10:85:B6:24:1E:CC:B6:F6:5E:FA:DA:\n 1C:48:D8:1C:C9:02:21:00:90:85:74:3A:02:58:4F:7D:\n 26:31:4A:4A:6C:E3:79:18:5B:88:7D:0C:DC:0C:3E:87:\n 8D:78:CB:D6:C6:C5:3F:8F\n Signed Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:\n E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A\n Timestamp : Jul 29 22:20:12.492 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:44:02:20:0A:A6:B3:ED:8C:C4:0B:94:BA:D2:92:CE:\n 1E:08:3A:09:67:A5:AA:7A:44:4B:1F:A0:16:1D:21:DC:\n A3:D2:D7:B5:02:20:32:C4:61:36:D6:F0:D0:6A:7D:43:\n 42:2D:64:1E:43:FF:4A:93:CE:B3:CA:30:10:DB:25:9A:\n 2B:F8:D6:64:71:EE\n Signature Algorithm: ecdsa-with-SHA256\n Signature Value:\n 30:44:02:20:10:b8:7d:44:4a:83:b0:80:4c:04:09:00:0d:6b:\n 1c:de:2b:a1:6e:4c:07:c9:f7:2f:eb:0f:87:b2:38:5d:3d:cc:\n 02:20:3c:dd:6b:6d:df:67:32:80:db:ea:86:e4:bf:e4:d6:d8:\n b9:83:8a:e4:dd:68:89:53:45:1b:be:95:06:2c:a2:af\n-----BEGIN CERTIFICATE-----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\n6w+HsjhdPcwCIDzda23fZzKA2+qG5L/k1ti5g4rk3WiJU0UbvpUGLKKv\n-----END CERTIFICATE-----\n------------------\n No extensions\n ASN.1Cert, length=742\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 31:ee:e8:8a:fb:87:cd:9e:f8:33:66:04:74:3f:9b:27\n Signature Algorithm: ecdsa-with-SHA384\n Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS Transit ECC CA R2\n Validity\n Not Before: May 29 19:49:45 2025 GMT\n Not After : May 27 19:49:44 2035 GMT\n Subject: C = US, O = SSL Corporation, CN = Cloudflare TLS Issuing ECC CA 3\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (256 bit)\n pub:\n 04:fd:1d:14:14:8e:23:42:93:26:cf:70:d0:89:d7:\n b1:1e:72:ac:3e:5d:59:52:81:df:1c:f5:d6:25:b9:\n d6:77:07:85:0b:8d:12:b1:2b:3f:40:b9:1f:72:06:\n e0:ff:40:52:0a:93:49:f8:c9:71:b0:7e:ee:e0:a3:\n 45:51:18:44:74\n ASN1 OID: prime256v1\n NIST CURVE: P-256\n X509v3 extensions:\n X509v3 Basic Constraints: critical\n CA:TRUE, pathlen:0\n X509v3 Authority Key Identifier: \n 32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97\n Authority Information Access: \n CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-T-ECC-R2.cer\n X509v3 Certificate Policies: \n Policy: X509v3 Any Policy\n X509v3 Extended Key Usage: \n TLS Web Client Authentication, TLS Web Server Authentication\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://crls.ssl.com/SSL.com-TLS-T-ECC-R2.crl\n\n X509v3 Subject Key Identifier: \n 83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66\n X509v3 Key Usage: critical\n Digital Signature, Certificate Sign, CRL Sign\n Signature Algorithm: ecdsa-with-SHA384\n Signature Value:\n 30:64:02:30:64:5b:f7:60:4c:0a:e5:df:aa:71:e8:b5:4c:5b:\n 37:c7:2e:fd:29:14:3f:8f:f4:1a:0e:63:38:ab:67:66:92:d8:\n 8c:2c:40:f1:db:d2:b4:1d:64:c6:39:36:08:53:4e:4e:02:30:\n 28:b0:0d:4e:f5:7e:1b:58:55:1b:a5:51:ce:7b:e4:72:6b:a0:\n b5:e0:8f:e0:64:a6:40:6e:6d:d1:e7:6f:6f:9a:3e:90:87:ec:\n b3:fa:40:d4:3f:5e:6f:4d:8a:a7:71:03\n-----BEGIN CERTIFICATE-----\nMIIC4jCCAmmgAwIBAgIQMe7oivuHzZ74M2YEdD+bJzAKBggqhkjOPQQDAzBPMQsw\nCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSYwJAYDVQQDDB1T\nU0wuY29tIFRMUyBUcmFuc2l0IEVDQyBDQSBSMjAeFw0yNTA1MjkxOTQ5NDVaFw0z\nNTA1MjcxOTQ5NDRaMFExCzAJBgNVBAYTAlVTMRgwFgYDVQQKDA9TU0wgQ29ycG9y\nYXRpb24xKDAmBgNVBAMMH0Nsb3VkZmxhcmUgVExTIElzc3VpbmcgRUNDIENBIDMw\nWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAT9HRQUjiNCkybPcNCJ17Eecqw+XVlS\ngd8c9dYludZ3B4ULjRKxKz9AuR9yBuD/QFIKk0n4yXGwfu7go0VRGER0o4IBIzCC\nAR8wEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQyosfYWIv/f8A88lVp\nM+zOzB+8lzBIBggrBgEFBQcBAQQ8MDowOAYIKwYBBQUHMAKGLGh0dHA6Ly9jZXJ0\nLnNzbC5jb20vU1NMLmNvbS1UTFMtVC1FQ0MtUjIuY2VyMBEGA1UdIAQKMAgwBgYE\nVR0gADAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPQYDVR0fBDYwNDAy\noDCgLoYsaHR0cDovL2NybHMuc3NsLmNvbS9TU0wuY29tLVRMUy1ULUVDQy1SMi5j\ncmwwHQYDVR0OBBYEFIMD/ef29UpNFUH07SIW0zIKPspmMA4GA1UdDwEB/wQEAwIB\nhjAKBggqhkjOPQQDAwNnADBkAjBkW/dgTArl36px6LVMWzfHLv0pFD+P9BoOYzir\nZ2aS2IwsQPHb0rQdZMY5NghTTk4CMCiwDU71fhtYVRulUc575HJroLXgj+BkpkBu\nbdHnb2+aPpCH7LP6QNQ/Xm9NiqdxAw==\n-----END CERTIFICATE-----\n------------------\n No extensions\n ASN.1Cert, length=824\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 60:4d:8a:f8:d0:0b:a8:74:8b:95:58:53:17:2c:5f:2e\n Signature Algorithm: ecdsa-with-SHA384\n Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022\n Validity\n Not Before: Oct 21 17:02:23 2022 GMT\n Not After : Oct 17 17:02:22 2037 GMT\n Subject: C = US, O = SSL Corporation, CN = SSL.com TLS Transit ECC CA R2\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (384 bit)\n pub:\n 04:64:e7:7d:99:03:53:5c:91:1e:ea:f8:d8:23:ad:\n a1:bf:2c:e2:63:89:ef:28:68:f6:ed:d7:f0:ec:ab:\n 68:ae:77:2b:e4:76:97:1b:50:eb:db:59:28:2d:6f:\n b8:36:b9:ab:8d:97:ca:4c:22:9e:ee:89:d9:02:3f:\n fd:7a:73:3a:90:8d:2b:cc:2f:3a:37:83:da:0d:b4:\n 2d:45:1b:73:72:09:65:5f:78:21:3d:e7:8b:66:3f:\n 47:fd:09:29:d6:14:0f\n ASN1 OID: secp384r1\n NIST CURVE: P-384\n X509v3 extensions:\n X509v3 Basic Constraints: critical\n CA:TRUE, pathlen:1\n X509v3 Authority Key Identifier: \n 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0\n Authority Information Access: \n CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-ECC.cer\n X509v3 Certificate Policies: \n Policy: X509v3 Any Policy\n CPS: https://www.ssl.com/repository\n X509v3 Extended Key Usage: \n TLS Web Client Authentication, TLS Web Server Authentication\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-ECC.crl\n\n X509v3 Subject Key Identifier: \n 32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97\n X509v3 Key Usage: critical\n Digital Signature, Certificate Sign, CRL Sign\n Signature Algorithm: ecdsa-with-SHA384\n Signature Value:\n 30:66:02:31:00:b8:4a:42:3e:7b:67:2d:b3:59:d3:37:d3:02:\n 46:29:7d:ef:3e:b6:e1:6c:4b:02:9f:78:85:3e:ed:35:91:8f:\n 64:b7:bd:62:22:c8:cb:38:0a:a9:6f:db:13:46:f6:87:d0:02:\n 31:00:af:57:95:cc:45:cb:a7:03:29:50:68:24:1c:e0:9f:c6:\n c1:1d:69:ef:2a:cf:0b:40:d1:59:67:b2:2c:09:10:5a:2e:58:\n 96:d6:bd:0f:19:57:ef:84:05:16:4b:05:08:fd\n-----BEGIN CERTIFICATE-----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\n74QFFksFCP0=\n-----END CERTIFICATE-----\n------------------\n No extensions\n ASN.1Cert, length=1090\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 17:3d:ca:60:ea:9f:8e:10:26:da:fc:d7:28:10:e4:8e\n Signature Algorithm: sha256WithRSAEncryption\n Issuer: C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services\n Validity\n Not Before: Aug 1 00:00:00 2025 GMT\n Not After : Dec 31 23:59:59 2028 GMT\n Subject: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (384 bit)\n pub:\n 04:45:29:35:73:fa:c2:b8:23:ce:14:7d:a8:b1:4d:\n a0:5b:36:ee:2a:2c:53:c3:60:09:35:b2:24:66:26:\n 69:c0:b3:95:d6:5d:92:40:19:0e:c6:a5:13:70:f4:\n ef:12:51:28:5d:e7:cc:bd:f9:3c:85:c1:cf:94:90:\n c9:2b:ce:92:42:58:59:67:fd:94:27:10:64:8c:4f:\n 04:b1:4d:49:e4:7b:4f:9b:f5:e7:08:f8:03:88:f7:\n a7:c3:92:4b:19:54:81\n ASN1 OID: secp384r1\n NIST CURVE: P-384\n X509v3 extensions:\n X509v3 Authority Key Identifier: \n A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4\n X509v3 Subject Key Identifier: \n 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0\n X509v3 Key Usage: critical\n Digital Signature, Certificate Sign, CRL Sign\n X509v3 Basic Constraints: critical\n CA:TRUE, pathlen:2\n X509v3 Extended Key Usage: \n TLS Web Server Authentication, TLS Web Client Authentication\n X509v3 Certificate Policies: \n Policy: 2.23.140.1.1\n Policy: 2.23.140.1.2.1\n Policy: 2.23.140.1.2.2\n Policy: 2.23.140.1.2.3\n Policy: 1.3.6.1.4.1.38064.1.3.1.1\n Policy: 1.3.6.1.4.1.38064.1.3.1.2\n Policy: 1.3.6.1.4.1.38064.1.3.1.3\n Policy: 1.3.6.1.4.1.38064.1.3.1.4\n Policy: 1.3.6.1.4.1.38064.1.3.1.5\n Policy: 1.3.6.1.4.1.38064.1.3.1.6\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://crl.comodoca.com/AAACertificateServices.crl\n\n Authority Information Access: \n OCSP - URI:http://ocsp.comodoca.com\n Signature Algorithm: sha256WithRSAEncryption\n Signature Value:\n 43:e5:70:fb:4b:ee:24:3c:f0:38:28:86:cb:de:46:c3:2b:2b:\n 9c:60:58:00:57:5b:6b:e8:d0:4e:45:d8:be:42:56:1a:d2:03:\n d7:17:f2:52:12:9f:f2:d6:6e:a7:05:11:a6:43:a8:54:1f:bd:\n 66:fb:11:d7:90:59:f0:e4:99:ad:1c:3c:52:1d:f6:43:3e:9b:\n 61:a9:5e:dc:f6:7c:d2:2c:c0:86:50:30:49:64:74:3c:3e:cc:\n 43:13:14:c5:8f:5b:d8:6b:02:bd:26:fc:cf:55:e0:27:17:cc:\n a1:94:91:44:24:d5:81:60:e1:b9:ae:d6:07:63:01:76:d3:7e:\n 03:cf:33:a1:77:58:fc:f8:55:9e:8c:74:35:96:cc:c5:77:42:\n 49:67:36:ca:88:d4:10:ed:c0:c1:c1:84:71:32:fd:f8:8d:70:\n e8:0f:3d:a2:73:50:d1:22:9f:19:7b:3f:5f:3e:94:6a:34:fc:\n 9b:48:07:d4:1b:5d:51:46:ee:af:76:81:df:e9:f4:cc:9f:d4:\n ee:ed:f9:0c:a8:86:bf:99:a6:34:6f:35:95:d6:6b:5a:30:53:\n 27:54:fd:7f:15:48:5a:69:9b:4d:5c:d9:bf:28:0d:32:d5:2e:\n 99:2b:39:0d:e9:65:8e:19:49:02:27:40:b1:37:3e:e6:20:81:\n 26:6a:91:16\n-----BEGIN CERTIFICATE-----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\nWmmbTVzZvygNMtUumSs5DelljhlJAidAsTc+5iCBJmqRFg==\n-----END CERTIFICATE-----\n------------------\n No extensions\n\n CertificateVerify, Length=75\n Signature Algorithm: ecdsa_secp256r1_sha256 (0x0403)\n Signature (len=71): 304502202F5E138B25FB7E1220876AE7D4FC3881194632D619DCCA13C47A0276A357D75F022100B23B5D016ABB0C38DC9B0397FD604ACDE2C8C6AAEFC0C8DEEB6A795C3C17DD27\n\n Finished, Length=48\n verify_data (len=48): 896358CBAE413BA7F98CB5A6780ACDDBA7CE4E0F91313B6291AFCD45AD63CAE29DF78367212799D29836955359216261","type":"mono"}]},{"id":"msg-4","title":"Sent TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.2 (0x303)\n Content Type = ChangeCipherSpec (20)\n Length = 1\n change_cipher_spec (1)","type":"mono"}]},{"id":"msg-5","title":"Sent TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.2 (0x303)\n Content Type = ApplicationData (23)\n Length = 69\n Inner Content Type = Handshake (22)\n Finished, Length=48\n verify_data (len=48): E53A76A668104CE57D48E81485A6C40BED413E79A1C6F17B2B085529F4892AC54CAFC302653D2BC905E1185F5ADA43F8","type":"mono"}]},{"id":"msg-6","title":"Sent TLS Record","fields":[{"label":"Trace","value":"Header:\n Version = TLS 1.2 (0x303)\n Content Type = ApplicationData (23)\n Length = 19\n Inner Content Type = Alert (21)\n Level=warning(1), description=close notify(0)","type":"mono"}]}],"raw":{"trace":"Sent TLS Record\nHeader:\n Version = TLS 1.0 (0x301)\n Content Type = Handshake (22)\n Length = 1601\n ClientHello, Length=1597\n client_version=0x303 (TLS 1.2)\n Random:\n gmt_unix_time=0x95AD7D4D\n random_bytes (len=28): 16B31A0A27C8E3727301FE2FAE33C094ADA6A71D331288348FF6A82F\n session_id (len=32): A1E0CDE646BE378B901355AB7F2A33652F574E89709AC7B5D1E796A46330A02E\n cipher_suites (len=104)\n {0x13, 0x02} TLS_AES_256_GCM_SHA384\n {0x13, 0x03} TLS_CHACHA20_POLY1305_SHA256\n {0x13, 0x01} TLS_AES_128_GCM_SHA256\n {0xC0, 0x2F} TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x2B} TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x30} TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384\n {0xC0, 0x2C} TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384\n {0x00, 0x9E} TLS_DHE_RSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x27} TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256\n {0x00, 0x67} TLS_DHE_RSA_WITH_AES_128_CBC_SHA256\n {0xC0, 0x28} TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384\n {0x00, 0x6B} TLS_DHE_RSA_WITH_AES_256_CBC_SHA256\n {0x00, 0xA3} TLS_DHE_DSS_WITH_AES_256_GCM_SHA384\n {0x00, 0x9F} TLS_DHE_RSA_WITH_AES_256_GCM_SHA384\n {0xCC, 0xA9} TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256\n {0xCC, 0xA8} TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256\n {0xCC, 0xAA} TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256\n {0xC0, 0xAD} TLS_ECDHE_ECDSA_WITH_AES_256_CCM\n {0xC0, 0x9F} TLS_DHE_RSA_WITH_AES_256_CCM\n {0xC0, 0x5D} TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384\n {0xC0, 0x61} TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384\n {0xC0, 0x57} TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384\n {0xC0, 0x53} TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384\n {0x00, 0xA2} TLS_DHE_DSS_WITH_AES_128_GCM_SHA256\n {0xC0, 0xAC} TLS_ECDHE_ECDSA_WITH_AES_128_CCM\n {0xC0, 0x9E} TLS_DHE_RSA_WITH_AES_128_CCM\n {0xC0, 0x5C} TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x60} TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x56} TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x52} TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256\n {0xC0, 0x24} TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384\n {0x00, 0x6A} TLS_DHE_DSS_WITH_AES_256_CBC_SHA256\n {0xC0, 0x23} TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256\n {0x00, 0x40} TLS_DHE_DSS_WITH_AES_128_CBC_SHA256\n {0xC0, 0x0A} TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA\n {0xC0, 0x14} TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA\n {0x00, 0x39} TLS_DHE_RSA_WITH_AES_256_CBC_SHA\n {0x00, 0x38} TLS_DHE_DSS_WITH_AES_256_CBC_SHA\n {0xC0, 0x09} TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA\n {0xC0, 0x13} TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA\n {0x00, 0x33} TLS_DHE_RSA_WITH_AES_128_CBC_SHA\n {0x00, 0x32} TLS_DHE_DSS_WITH_AES_128_CBC_SHA\n {0x00, 0x9D} TLS_RSA_WITH_AES_256_GCM_SHA384\n {0xC0, 0x9D} TLS_RSA_WITH_AES_256_CCM\n {0xC0, 0x51} TLS_RSA_WITH_ARIA_256_GCM_SHA384\n {0x00, 0x9C} TLS_RSA_WITH_AES_128_GCM_SHA256\n {0xC0, 0x9C} TLS_RSA_WITH_AES_128_CCM\n {0xC0, 0x50} TLS_RSA_WITH_ARIA_128_GCM_SHA256\n {0x00, 0x3D} TLS_RSA_WITH_AES_256_CBC_SHA256\n {0x00, 0x3C} TLS_RSA_WITH_AES_128_CBC_SHA256\n {0x00, 0x35} TLS_RSA_WITH_AES_256_CBC_SHA\n {0x00, 0x2F} TLS_RSA_WITH_AES_128_CBC_SHA\n compression_methods (len=1)\n No Compression (0x00)\n extensions, length = 1420\n extension_type=renegotiate(65281), length=1\n \n extension_type=server_name(0), length=16\n 0000 - 00 0e 00 00 0b 65 78 61-6d 70 6c 65 2e 63 6f .....example.co\n 000f - 6d m\n extension_type=ec_point_formats(11), length=4\n uncompressed (0)\n ansiX962_compressed_prime (1)\n ansiX962_compressed_char2 (2)\n extension_type=supported_groups(10), length=18\n X25519MLKEM768 (4588)\n ecdh_x25519 (29)\n secp256r1 (P-256) (23)\n ecdh_x448 (30)\n secp384r1 (P-384) (24)\n secp521r1 (P-521) (25)\n ffdhe2048 (256)\n ffdhe3072 (257)\n extension_type=session_ticket(35), length=0\n extension_type=application_layer_protocol_negotiation(16), length=14\n h2\n http/1.1\n extension_type=encrypt_then_mac(22), length=0\n extension_type=extended_master_secret(23), length=0\n extension_type=signature_algorithms(13), length=54\n mldsa65 (0x0905)\n mldsa87 (0x0906)\n mldsa44 (0x0904)\n ecdsa_secp256r1_sha256 (0x0403)\n ecdsa_secp384r1_sha384 (0x0503)\n ecdsa_secp521r1_sha512 (0x0603)\n ed25519 (0x0807)\n ed448 (0x0808)\n ecdsa_brainpoolP256r1tls13_sha256 (0x081a)\n ecdsa_brainpoolP384r1tls13_sha384 (0x081b)\n ecdsa_brainpoolP512r1tls13_sha512 (0x081c)\n rsa_pss_pss_sha256 (0x0809)\n rsa_pss_pss_sha384 (0x080a)\n rsa_pss_pss_sha512 (0x080b)\n rsa_pss_rsae_sha256 (0x0804)\n rsa_pss_rsae_sha384 (0x0805)\n rsa_pss_rsae_sha512 (0x0806)\n rsa_pkcs1_sha256 (0x0401)\n rsa_pkcs1_sha384 (0x0501)\n rsa_pkcs1_sha512 (0x0601)\n ecdsa_sha224 (0x0303)\n rsa_pkcs1_sha224 (0x0301)\n dsa_sha224 (0x0302)\n dsa_sha256 (0x0402)\n dsa_sha384 (0x0502)\n dsa_sha512 (0x0602)\n extension_type=supported_versions(43), length=5\n TLS 1.3 (772)\n TLS 1.2 (771)\n extension_type=psk_key_exchange_modes(45), length=2\n psk_dhe_ke (1)\n extension_type=key_share(51), length=1258\n NamedGroup: X25519MLKEM768 (4588)\n key_exchange: (len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n NamedGroup: ecdh_x25519 (29)\n key_exchange: (len=32): 68470A9FA364D1C4E641486A37ADC1CCD8594EBA7A87DF45B01A871BB346D363\n\nReceived TLS Record\nHeader:\n Version = TLS 1.2 (0x303)\n Content Type = Handshake (22)\n Length = 1210\n ServerHello, Length=1206\n server_version=0x303 (TLS 1.2)\n Random:\n gmt_unix_time=0x3C23CB50\n random_bytes (len=28): 910F6F7B384EF107C68A7B6C2E3A00756BE9113199B0D18B732B8CD9\n session_id (len=32): A1E0CDE646BE378B901355AB7F2A33652F574E89709AC7B5D1E796A46330A02E\n cipher_suite {0x13, 0x02} TLS_AES_256_GCM_SHA384\n compression_method: No Compression (0x00)\n extensions, length = 1134\n extension_type=key_share(51), length=1124\n NamedGroup: X25519MLKEM768 (4588)\n key_exchange: (len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n extension_type=supported_versions(43), length=2\n TLS 1.3 (772)\n\nReceived TLS Record\nHeader:\n Version = TLS 1.2 (0x303)\n Content Type = ChangeCipherSpec (20)\n Length = 1\n change_cipher_spec (1)\n\nReceived TLS Record\nHeader:\n Version = TLS 1.2 (0x303)\n Content Type = ApplicationData (23)\n Length = 3853\n Inner Content Type = Handshake (22)\n EncryptedExtensions, Length=15\n extensions, length = 13\n extension_type=server_name(0), length=0\n extension_type=application_layer_protocol_negotiation(16), length=5\n h2\n\n Certificate, Length=3682\n context (len=0): \n certificate_list, length=3678\n ASN.1Cert, length=1002\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 06:24:d0:ab:31:15:58:78:0b:7d:52:13:b9:63:18:31\n Signature Algorithm: ecdsa-with-SHA256\n Issuer: C = US, O = SSL Corporation, CN = Cloudflare TLS Issuing ECC CA 3\n Validity\n Not Before: Jul 29 22:10:08 2026 GMT\n Not After : Oct 27 22:17:21 2026 GMT\n Subject: CN = example.com\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (256 bit)\n pub:\n 04:76:4e:09:a3:dd:b2:cf:45:a5:4d:d1:5b:9d:f0:\n 51:00:52:23:33:dd:9d:81:77:99:6d:8b:7f:6e:86:\n eb:c1:01:1c:a7:f9:1e:89:26:40:42:bf:9e:1d:95:\n 38:b3:cd:a5:01:cc:b9:eb:89:a3:d5:5b:db:b2:b1:\n 82:09:5d:35:62\n ASN1 OID: prime256v1\n NIST CURVE: P-256\n X509v3 extensions:\n X509v3 Basic Constraints: critical\n CA:FALSE\n X509v3 Authority Key Identifier: \n 83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66\n Authority Information Access: \n CA Issuers - URI:http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer\n OCSP - URI:http://o.cf-i.ssl.com\n X509v3 Subject Alternative Name: \n DNS:example.com, DNS:*.example.com\n X509v3 Certificate Policies: \n Policy: 2.23.140.1.2.1\n Policy: 1.3.6.1.4.1.38064.1.3.1.1\n X509v3 Extended Key Usage: \n TLS Web Server Authentication\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://c.cf-i.ssl.com/ae801ed1c55bb579d79208b0d772acfb8cc3a208.crl\n\n X509v3 Key Usage: critical\n Digital Signature\n 1.3.6.1.4.1.44363.44: \n ..\n CT Precertificate SCTs: \n Signed Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n Timestamp : Jul 29 22:20:12.470 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:46:02:21:00:FD:58:5A:2D:44:6C:D6:46:32:D4:A4:\n AB:B9:52:01:55:10:85:B6:24:1E:CC:B6:F6:5E:FA:DA:\n 1C:48:D8:1C:C9:02:21:00:90:85:74:3A:02:58:4F:7D:\n 26:31:4A:4A:6C:E3:79:18:5B:88:7D:0C:DC:0C:3E:87:\n 8D:78:CB:D6:C6:C5:3F:8F\n Signed Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:\n E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A\n Timestamp : Jul 29 22:20:12.492 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:44:02:20:0A:A6:B3:ED:8C:C4:0B:94:BA:D2:92:CE:\n 1E:08:3A:09:67:A5:AA:7A:44:4B:1F:A0:16:1D:21:DC:\n A3:D2:D7:B5:02:20:32:C4:61:36:D6:F0:D0:6A:7D:43:\n 42:2D:64:1E:43:FF:4A:93:CE:B3:CA:30:10:DB:25:9A:\n 2B:F8:D6:64:71:EE\n Signature Algorithm: ecdsa-with-SHA256\n Signature Value:\n 30:44:02:20:10:b8:7d:44:4a:83:b0:80:4c:04:09:00:0d:6b:\n 1c:de:2b:a1:6e:4c:07:c9:f7:2f:eb:0f:87:b2:38:5d:3d:cc:\n 02:20:3c:dd:6b:6d:df:67:32:80:db:ea:86:e4:bf:e4:d6:d8:\n b9:83:8a:e4:dd:68:89:53:45:1b:be:95:06:2c:a2:af\n-----BEGIN CERTIFICATE-----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\n6w+HsjhdPcwCIDzda23fZzKA2+qG5L/k1ti5g4rk3WiJU0UbvpUGLKKv\n-----END CERTIFICATE-----\n------------------\n No extensions\n ASN.1Cert, length=742\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 31:ee:e8:8a:fb:87:cd:9e:f8:33:66:04:74:3f:9b:27\n Signature Algorithm: ecdsa-with-SHA384\n Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS Transit ECC CA R2\n Validity\n Not Before: May 29 19:49:45 2025 GMT\n Not After : May 27 19:49:44 2035 GMT\n Subject: C = US, O = SSL Corporation, CN = Cloudflare TLS Issuing ECC CA 3\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (256 bit)\n pub:\n 04:fd:1d:14:14:8e:23:42:93:26:cf:70:d0:89:d7:\n b1:1e:72:ac:3e:5d:59:52:81:df:1c:f5:d6:25:b9:\n d6:77:07:85:0b:8d:12:b1:2b:3f:40:b9:1f:72:06:\n e0:ff:40:52:0a:93:49:f8:c9:71:b0:7e:ee:e0:a3:\n 45:51:18:44:74\n ASN1 OID: prime256v1\n NIST CURVE: P-256\n X509v3 extensions:\n X509v3 Basic Constraints: critical\n CA:TRUE, pathlen:0\n X509v3 Authority Key Identifier: \n 32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97\n Authority Information Access: \n CA Issuers - URI:http://cert.ssl.com/SSL.com-TLS-T-ECC-R2.cer\n X509v3 Certificate Policies: \n Policy: X509v3 Any Policy\n X509v3 Extended Key Usage: \n TLS Web Client Authentication, TLS Web Server Authentication\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://crls.ssl.com/SSL.com-TLS-T-ECC-R2.crl\n\n X509v3 Subject Key Identifier: \n 83:03:FD:E7:F6:F5:4A:4D:15:41:F4:ED:22:16:D3:32:0A:3E:CA:66\n X509v3 Key Usage: critical\n Digital Signature, Certificate Sign, CRL Sign\n Signature Algorithm: ecdsa-with-SHA384\n Signature Value:\n 30:64:02:30:64:5b:f7:60:4c:0a:e5:df:aa:71:e8:b5:4c:5b:\n 37:c7:2e:fd:29:14:3f:8f:f4:1a:0e:63:38:ab:67:66:92:d8:\n 8c:2c:40:f1:db:d2:b4:1d:64:c6:39:36:08:53:4e:4e:02:30:\n 28:b0:0d:4e:f5:7e:1b:58:55:1b:a5:51:ce:7b:e4:72:6b:a0:\n b5:e0:8f:e0:64:a6:40:6e:6d:d1:e7:6f:6f:9a:3e:90:87:ec:\n b3:fa:40:d4:3f:5e:6f:4d:8a:a7:71:03\n-----BEGIN CERTIFICATE-----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\nbdHnb2+aPpCH7LP6QNQ/Xm9NiqdxAw==\n-----END CERTIFICATE-----\n------------------\n No extensions\n ASN.1Cert, length=824\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 60:4d:8a:f8:d0:0b:a8:74:8b:95:58:53:17:2c:5f:2e\n Signature Algorithm: ecdsa-with-SHA384\n Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022\n Validity\n Not Before: Oct 21 17:02:23 2022 GMT\n Not After : Oct 17 17:02:22 2037 GMT\n Subject: C = US, O = SSL Corporation, CN = SSL.com TLS Transit ECC CA R2\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (384 bit)\n pub:\n 04:64:e7:7d:99:03:53:5c:91:1e:ea:f8:d8:23:ad:\n a1:bf:2c:e2:63:89:ef:28:68:f6:ed:d7:f0:ec:ab:\n 68:ae:77:2b:e4:76:97:1b:50:eb:db:59:28:2d:6f:\n b8:36:b9:ab:8d:97:ca:4c:22:9e:ee:89:d9:02:3f:\n fd:7a:73:3a:90:8d:2b:cc:2f:3a:37:83:da:0d:b4:\n 2d:45:1b:73:72:09:65:5f:78:21:3d:e7:8b:66:3f:\n 47:fd:09:29:d6:14:0f\n ASN1 OID: secp384r1\n NIST CURVE: P-384\n X509v3 extensions:\n X509v3 Basic Constraints: critical\n CA:TRUE, pathlen:1\n X509v3 Authority Key Identifier: \n 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0\n Authority Information Access: \n CA Issuers - URI:http://cert.ssl.com/SSLcom-TLS-Root-2022-ECC.cer\n X509v3 Certificate Policies: \n Policy: X509v3 Any Policy\n CPS: https://www.ssl.com/repository\n X509v3 Extended Key Usage: \n TLS Web Client Authentication, TLS Web Server Authentication\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://crls.ssl.com/SSLcom-TLS-Root-2022-ECC.crl\n\n X509v3 Subject Key Identifier: \n 32:A2:C7:D8:58:8B:FF:7F:C0:3C:F2:55:69:33:EC:CE:CC:1F:BC:97\n X509v3 Key Usage: critical\n Digital Signature, Certificate Sign, CRL Sign\n Signature Algorithm: ecdsa-with-SHA384\n Signature Value:\n 30:66:02:31:00:b8:4a:42:3e:7b:67:2d:b3:59:d3:37:d3:02:\n 46:29:7d:ef:3e:b6:e1:6c:4b:02:9f:78:85:3e:ed:35:91:8f:\n 64:b7:bd:62:22:c8:cb:38:0a:a9:6f:db:13:46:f6:87:d0:02:\n 31:00:af:57:95:cc:45:cb:a7:03:29:50:68:24:1c:e0:9f:c6:\n c1:1d:69:ef:2a:cf:0b:40:d1:59:67:b2:2c:09:10:5a:2e:58:\n 96:d6:bd:0f:19:57:ef:84:05:16:4b:05:08:fd\n-----BEGIN CERTIFICATE-----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\n74QFFksFCP0=\n-----END CERTIFICATE-----\n------------------\n No extensions\n ASN.1Cert, length=1090\n------details-----\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number:\n 17:3d:ca:60:ea:9f:8e:10:26:da:fc:d7:28:10:e4:8e\n Signature Algorithm: sha256WithRSAEncryption\n Issuer: C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services\n Validity\n Not Before: Aug 1 00:00:00 2025 GMT\n Not After : Dec 31 23:59:59 2028 GMT\n Subject: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022\n Subject Public Key Info:\n Public Key Algorithm: id-ecPublicKey\n Public-Key: (384 bit)\n pub:\n 04:45:29:35:73:fa:c2:b8:23:ce:14:7d:a8:b1:4d:\n a0:5b:36:ee:2a:2c:53:c3:60:09:35:b2:24:66:26:\n 69:c0:b3:95:d6:5d:92:40:19:0e:c6:a5:13:70:f4:\n ef:12:51:28:5d:e7:cc:bd:f9:3c:85:c1:cf:94:90:\n c9:2b:ce:92:42:58:59:67:fd:94:27:10:64:8c:4f:\n 04:b1:4d:49:e4:7b:4f:9b:f5:e7:08:f8:03:88:f7:\n a7:c3:92:4b:19:54:81\n ASN1 OID: secp384r1\n NIST CURVE: P-384\n X509v3 extensions:\n X509v3 Authority Key Identifier: \n A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4\n X509v3 Subject Key Identifier: \n 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0\n X509v3 Key Usage: critical\n Digital Signature, Certificate Sign, CRL Sign\n X509v3 Basic Constraints: critical\n CA:TRUE, pathlen:2\n X509v3 Extended Key Usage: \n TLS Web Server Authentication, TLS Web Client Authentication\n X509v3 Certificate Policies: \n Policy: 2.23.140.1.1\n Policy: 2.23.140.1.2.1\n Policy: 2.23.140.1.2.2\n Policy: 2.23.140.1.2.3\n Policy: 1.3.6.1.4.1.38064.1.3.1.1\n Policy: 1.3.6.1.4.1.38064.1.3.1.2\n Policy: 1.3.6.1.4.1.38064.1.3.1.3\n Policy: 1.3.6.1.4.1.38064.1.3.1.4\n Policy: 1.3.6.1.4.1.38064.1.3.1.5\n Policy: 1.3.6.1.4.1.38064.1.3.1.6\n X509v3 CRL Distribution Points: \n Full Name:\n URI:http://crl.comodoca.com/AAACertificateServices.crl\n\n Authority Information Access: \n OCSP - URI:http://ocsp.comodoca.com\n Signature Algorithm: sha256WithRSAEncryption\n Signature Value:\n 43:e5:70:fb:4b:ee:24:3c:f0:38:28:86:cb:de:46:c3:2b:2b:\n 9c:60:58:00:57:5b:6b:e8:d0:4e:45:d8:be:42:56:1a:d2:03:\n d7:17:f2:52:12:9f:f2:d6:6e:a7:05:11:a6:43:a8:54:1f:bd:\n 66:fb:11:d7:90:59:f0:e4:99:ad:1c:3c:52:1d:f6:43:3e:9b:\n 61:a9:5e:dc:f6:7c:d2:2c:c0:86:50:30:49:64:74:3c:3e:cc:\n 43:13:14:c5:8f:5b:d8:6b:02:bd:26:fc:cf:55:e0:27:17:cc:\n a1:94:91:44:24:d5:81:60:e1:b9:ae:d6:07:63:01:76:d3:7e:\n 03:cf:33:a1:77:58:fc:f8:55:9e:8c:74:35:96:cc:c5:77:42:\n 49:67:36:ca:88:d4:10:ed:c0:c1:c1:84:71:32:fd:f8:8d:70:\n e8:0f:3d:a2:73:50:d1:22:9f:19:7b:3f:5f:3e:94:6a:34:fc:\n 9b:48:07:d4:1b:5d:51:46:ee:af:76:81:df:e9:f4:cc:9f:d4:\n ee:ed:f9:0c:a8:86:bf:99:a6:34:6f:35:95:d6:6b:5a:30:53:\n 27:54:fd:7f:15:48:5a:69:9b:4d:5c:d9:bf:28:0d:32:d5:2e:\n 99:2b:39:0d:e9:65:8e:19:49:02:27:40:b1:37:3e:e6:20:81:\n 26:6a:91:16\n-----BEGIN CERTIFICATE-----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\nWmmbTVzZvygNMtUumSs5DelljhlJAidAsTc+5iCBJmqRFg==\n-----END CERTIFICATE-----\n------------------\n No extensions\n\n CertificateVerify, Length=75\n Signature Algorithm: ecdsa_secp256r1_sha256 (0x0403)\n Signature (len=71): 304502202F5E138B25FB7E1220876AE7D4FC3881194632D619DCCA13C47A0276A357D75F022100B23B5D016ABB0C38DC9B0397FD604ACDE2C8C6AAEFC0C8DEEB6A795C3C17DD27\n\n Finished, Length=48\n verify_data (len=48): 896358CBAE413BA7F98CB5A6780ACDDBA7CE4E0F91313B6291AFCD45AD63CAE29DF78367212799D29836955359216261\n\nSent TLS Record\nHeader:\n Version = TLS 1.2 (0x303)\n Content Type = ChangeCipherSpec (20)\n Length = 1\n change_cipher_spec (1)\n\nSent TLS Record\nHeader:\n Version = TLS 1.2 (0x303)\n Content Type = ApplicationData (23)\n Length = 69\n Inner Content Type = Handshake (22)\n Finished, Length=48\n verify_data (len=48): E53A76A668104CE57D48E81485A6C40BED413E79A1C6F17B2B085529F4892AC54CAFC302653D2BC905E1185F5ADA43F8\n\nSent TLS Record\nHeader:\n Version = TLS 1.2 (0x303)\n Content Type = ApplicationData (23)\n Length = 19\n Inner Content Type = Alert (21)\n Level=warning(1), description=close notify(0)"}},"error":null,"meta":{"durationMs":327,"resolver":null,"query":"example.com"},"__ttl":5}