{"ok":true,"cached":false,"status":"ok","tool":"ssl","result":{"status":"ok","title":"SSL certificate for example.com:443","titleKey":"ssl","titleVars":{"host":"example.com","port":443},"query":"example.com","table":null,"fields":null,"checks":[{"level":"pass","title":"Hostname matches","detail":"The certificate is valid for example.com (CN or SAN)."},{"level":"pass","title":"Not expired","detail":"86 day(s) until expiration."},{"level":"pass","title":"Trusted","detail":"The certificate chain was verified against the trust store."},{"level":"pass","title":"Not self-signed","detail":"The certificate was issued by a separate CA."},{"level":"pass","title":"Chain complete","detail":"The server sent a complete chain of 4 certificate(s)."},{"level":"pass","title":"Strong signatures","detail":"No SHA-1/MD5 signatures in the certificate chain."},{"level":"pass","title":"Key strength","detail":"EC key 256 P-256."},{"level":"info","title":"HSTS not set","detail":"No Strict-Transport-Security header was returned."}],"sections":[{"id":"dns","titleKey":"ssl_sec_dns","fields":[{"label":"Resolves to","value":"104.20.23.154, 172.66.147.243, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a","type":"text"},{"label":"Reverse DNS","value":"—","type":"text"},{"label":"Nameservers","value":"elliott.ns.cloudflare.com, hera.ns.cloudflare.com","type":"text"}],"title":"DNS information"},{"id":"general","titleKey":"ssl_sec_general","fields":[{"label":"Common Name","value":"example.com","type":"text"},{"label":"SANs","value":"DNS:example.com, DNS:*.example.com","type":"text"},{"label":"SAN count","value":"2","type":"text"},{"label":"Signature algorithm","value":"ecdsa-with-SHA256","type":"text"},{"label":"Key","value":"EC (P-256)","type":"text"},{"label":"Serial number","value":"0624D0AB311558780B7D5213B9631831","type":"code"},{"label":"Not before","value":"2026-07-29T22:10:08.000Z","type":"date"},{"label":"Not after","value":"2026-10-27T22:17:21.000Z","type":"date"},{"label":"Days remaining","value":"86","type":"badge"},{"label":"Certificates sent","value":"4","type":"text"},{"label":"Protocol / cipher","value":"TLSv1.3 · TLS_AES_256_GCM_SHA384 · ALPN h2","type":"text"},{"label":"OCSP stapling","value":"Supported","type":"text"},{"label":"OCSP URL","value":"http://o.cf-i.ssl.com","type":"url"},{"label":"CA Issuers","value":"http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer","type":"url"},{"label":"Server","value":"cloudflare","type":"text"},{"label":"HSTS","value":"Not supported","type":"text"},{"label":"HPKP","value":"Not supported","type":"text"}],"title":"General information"},{"id":"cert-0","title":"Certificate #1 — example.com","fields":[{"label":"Subject","value":"example.com","type":"text"},{"label":"Issuer","value":"SSL Corporation — Cloudflare TLS Issuing ECC CA 3","type":"text"},{"label":"Not before","value":"2026-07-29T22:10:08.000Z","type":"date"},{"label":"Not after","value":"2026-10-27T22:17:21.000Z","type":"date"},{"label":"Signature algorithm","value":"ecdsa-with-SHA256","type":"text"},{"label":"Serial number","value":"0624D0AB311558780B7D5213B9631831","type":"code"},{"label":"SHA-256 fingerprint","value":"61:53:A9:6F:D1:A6:AB:7F:4D:43:8F:C3:49:32:48:42:99:D0:72:9D:91:40:B3:A1:26:BB:2F:9C:07:B0:22:00","type":"code"},{"label":"SHA-1 fingerprint","value":"85:DC:25:6A:A7:94:31:B0:19:0F:9C:59:2B:90:C2:E8:E3:B5:9B:3E","type":"code"}],"checks":[]},{"id":"cert-1","title":"Certificate #2 — Cloudflare TLS Issuing ECC CA 3","fields":[{"label":"Subject","value":"Cloudflare TLS Issuing ECC CA 3 (SSL Corporation)","type":"text"},{"label":"Issuer","value":"SSL Corporation — SSL.com TLS Transit ECC CA R2","type":"text"},{"label":"Not before","value":"2025-05-29T19:49:45.000Z","type":"date"},{"label":"Not after","value":"2035-05-27T19:49:44.000Z","type":"date"},{"label":"Signature algorithm","value":"ecdsa-with-SHA384","type":"text"},{"label":"Serial number","value":"31EEE88AFB87CD9EF8336604743F9B27","type":"code"},{"label":"SHA-256 fingerprint","value":"F1:5F:29:AB:EF:73:AA:4D:D9:AB:75:4B:AE:AE:36:85:BD:D3:87:4B:46:B5:25:07:11:77:62:86:85:71:80:26","type":"code"},{"label":"SHA-1 fingerprint","value":"AE:80:1E:D1:C5:5B:B5:79:D7:92:08:B0:D7:72:AC:FB:8C:C3:A2:08","type":"code"}],"checks":[{"level":"pass","title":"Chain link","detail":"Certificate #1 directly certifies the one before it."}]},{"id":"cert-2","title":"Certificate #3 — SSL.com TLS Transit ECC CA R2","fields":[{"label":"Subject","value":"SSL.com TLS Transit ECC CA R2 (SSL Corporation)","type":"text"},{"label":"Issuer","value":"SSL Corporation — SSL.com TLS ECC Root CA 2022","type":"text"},{"label":"Not before","value":"2022-10-21T17:02:23.000Z","type":"date"},{"label":"Not after","value":"2037-10-17T17:02:22.000Z","type":"date"},{"label":"Signature algorithm","value":"ecdsa-with-SHA384","type":"text"},{"label":"Serial number","value":"604D8AF8D00BA8748B955853172C5F2E","type":"code"},{"label":"SHA-256 fingerprint","value":"5D:1B:C3:99:27:4E:64:9E:1C:72:69:7D:E9:1A:54:AD:72:50:88:C5:22:1C:B6:1E:17:EE:9C:29:0B:C4:2A:92","type":"code"},{"label":"SHA-1 fingerprint","value":"E1:51:88:4D:AE:92:4B:08:EF:26:46:01:21:D7:79:06:D5:D1:8A:C8","type":"code"}],"checks":[{"level":"pass","title":"Chain link","detail":"Certificate #2 directly certifies the one before it."}]},{"id":"cert-3","title":"Certificate #4 — SSL.com TLS ECC Root CA 2022","fields":[{"label":"Subject","value":"SSL.com TLS ECC Root CA 2022 (SSL Corporation)","type":"text"},{"label":"Issuer","value":"Comodo CA Limited — AAA Certificate Services","type":"text"},{"label":"Not before","value":"2025-08-01T00:00:00.000Z","type":"date"},{"label":"Not after","value":"2028-12-31T23:59:59.000Z","type":"date"},{"label":"Signature algorithm","value":"sha256WithRSAEncryption","type":"text"},{"label":"Serial number","value":"173DCA60EA9F8E1026DAFCD72810E48E","type":"code"},{"label":"SHA-256 fingerprint","value":"BA:06:D3:D3:E3:48:FC:E7:47:8C:C8:4B:42:2D:0E:63:8E:9E:22:1E:F1:A0:B5:3A:DC:14:CC:70:E0:4B:8A:B8","type":"code"},{"label":"SHA-1 fingerprint","value":"5C:85:D2:01:CA:68:B3:9F:CC:D2:4A:89:27:35:9E:F2:95:AF:83:DC","type":"code"}],"checks":[{"level":"pass","title":"Chain link","detail":"Certificate #3 directly certifies the one before it."}]}],"raw":{"ip":"172.66.147.243","leafPem":"-----BEGIN CERTIFICATE-----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\n6w+HsjhdPcwCIDzda23fZzKA2+qG5L/k1ti5g4rk3WiJU0UbvpUGLKKv\n-----END CERTIFICATE-----","protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2"}},"error":null,"meta":{"durationMs":100,"resolver":null,"query":"example.com"},"__ttl":5}