{
 "measurement": "TLS front-door post-quantum readiness, both halves of the handshake",
 "measured_at": "2026-09-01T17:46:42.630307",
 "date": "2026-09-01",
 "vantage_points": 1,
 "tool": "openssl s_client -showcerts",
 "n_hosts": 40,
 "n_organisations": 37,
 "reading_notes": [
  "negotiated_group = null means the client did not report a group. Counted as NOT OBSERVED, never as declining post-quantum key exchange. The first number is '31 confirmed', not '9 refused'.",
  "chain_horizon_days is computed only over certificates the server actually presented. Roots are usually not transmitted, so every horizon here is a LOWER BOUND.",
  "sig_hau_luong_tu (post_quantum_signature) is false for every certificate in every chain.",
  "The unit is a host, not an organisation. 40 hosts, 37 organisations."
 ],
 "results": [
  {
   "host": "cloudflare.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 903,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 35,
   "chain": [
    {
     "subject_cn": "cloudflare.com",
     "issuer_cn": "WE1",
     "sig_alg": "ecdsa-with-SHA256",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-10-06",
     "het_han_tho": "Oct  6 22:47:27 2026 GMT",
     "con_ngay": 35,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "WE1",
     "issuer_cn": "GTS Root R4",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2029-02-20",
     "het_han_tho": "Feb 20 14:00:00 2029 GMT",
     "con_ngay": 903,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GTS Root R4",
     "issuer_cn": "GlobalSign Root CA",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-01-28",
     "het_han_tho": "Jan 28 00:00:42 2028 GMT",
     "con_ngay": 514,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.akamai.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1685,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 92,
   "chain": [
    {
     "subject_cn": "www.akamai.com",
     "issuer_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-12-02",
     "het_han_tho": "Dec  2 23:59:59 2026 GMT",
     "con_ngay": 92,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "issuer_cn": "DigiCert Global Root G3",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2031-04-13",
     "het_han_tho": "Apr 13 23:59:59 2031 GMT",
     "con_ngay": 1685,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.fastly.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 2120,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 23,
   "chain": [
    {
     "subject_cn": "www.fastly.com",
     "issuer_cn": "Certainly Intermediate R1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-09-24",
     "het_han_tho": "Sep 24 19:31:59 2026 GMT",
     "con_ngay": 23,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Certainly Intermediate R1",
     "issuer_cn": "Starfield Root Certificate Authority - G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2032-06-21",
     "het_han_tho": "Jun 21 23:59:59 2032 GMT",
     "con_ngay": 2120,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "aws.amazon.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 4139,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 46,
   "chain": [
    {
     "subject_cn": "aws.amazon.com",
     "issuer_cn": "Amazon RSA 2048 M04",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-10-17",
     "het_han_tho": "Oct 17 23:59:59 2026 GMT",
     "con_ngay": 46,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Amazon RSA 2048 M04",
     "issuer_cn": "Amazon Root CA 1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-08-23",
     "het_han_tho": "Aug 23 22:26:35 2030 GMT",
     "con_ngay": 1452,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Amazon Root CA 1",
     "issuer_cn": "Starfield Services Root Certificate Authority - G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2037-12-31",
     "het_han_tho": "Dec 31 01:00:00 2037 GMT",
     "con_ngay": 4139,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "cloud.google.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 903,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 62,
   "chain": [
    {
     "subject_cn": "*.google.com",
     "issuer_cn": "WE2",
     "sig_alg": "ecdsa-with-SHA256",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-11-02",
     "het_han_tho": "Nov  2 08:37:41 2026 GMT",
     "con_ngay": 62,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "WE2",
     "issuer_cn": "GTS Root R4",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2029-02-20",
     "het_han_tho": "Feb 20 14:00:00 2029 GMT",
     "con_ngay": 903,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GTS Root R4",
     "issuer_cn": "GlobalSign Root CA",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-01-28",
     "het_han_tho": "Jan 28 00:00:42 2028 GMT",
     "con_ngay": 514,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "azure.microsoft.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 1022,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 23,
   "chain": [
    {
     "subject_cn": "azure.microsoft.com",
     "issuer_cn": "Microsoft TLS G2 RSA CA OCSP 04",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-09-24",
     "het_han_tho": "Sep 24 22:04:48 2026 GMT",
     "con_ngay": 23,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Microsoft TLS G2 RSA CA OCSP 04",
     "issuer_cn": "Microsoft TLS RSA Root G2",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2029-06-03",
     "het_han_tho": "Jun  3 20:02:59 2029 GMT",
     "con_ngay": 1006,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Microsoft TLS RSA Root G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2029-06-19",
     "het_han_tho": "Jun 19 23:59:59 2029 GMT",
     "con_ngay": 1022,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.digitalocean.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 4,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 83,
   "chain": [
    {
     "subject_cn": "digitalocean.com",
     "issuer_cn": "YE1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-11-23",
     "het_han_tho": "Nov 23 14:19:50 2026 GMT",
     "con_ngay": 83,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YE1",
     "issuer_cn": "Root YE",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YE",
     "issuer_cn": "ISRG Root X2",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "ISRG Root X2",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.ovhcloud.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 20,
   "chain": [
    {
     "subject_cn": "ovhcloud.com",
     "issuer_cn": "YR2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2026-09-21",
     "het_han_tho": "Sep 21 08:58:04 2026 GMT",
     "con_ngay": 20,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR2",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.oracle.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1685,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 159,
   "chain": [
    {
     "subject_cn": "www-cs-02.oracle.com",
     "issuer_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2027-02-07",
     "het_han_tho": "Feb  7 23:59:59 2027 GMT",
     "con_ngay": 159,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "issuer_cn": "DigiCert Global Root G3",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2031-04-13",
     "het_han_tho": "Apr 13 23:59:59 2031 GMT",
     "con_ngay": 1685,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.ibm.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1670,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 126,
   "chain": [
    {
     "subject_cn": "www.ibm.com",
     "issuer_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-01-05",
     "het_han_tho": "Jan  5 23:59:59 2027 GMT",
     "con_ngay": 126,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2031-03-29",
     "het_han_tho": "Mar 29 23:59:59 2031 GMT",
     "con_ngay": 1670,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.netlify.com",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1670,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 157,
   "chain": [
    {
     "subject_cn": "netlify.com",
     "issuer_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2027-02-05",
     "het_han_tho": "Feb  5 23:59:59 2027 GMT",
     "con_ngay": 157,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2031-03-29",
     "het_han_tho": "Mar 29 23:59:59 2031 GMT",
     "con_ngay": 1670,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "fly.io",
   "group": "Internet infrastructure & platforms",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 4,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 31,
   "chain": [
    {
     "subject_cn": "fly.io",
     "issuer_cn": "YE1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-10-02",
     "het_han_tho": "Oct  2 11:21:26 2026 GMT",
     "con_ngay": 31,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YE1",
     "issuer_cn": "Root YE",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YE",
     "issuer_cn": "ISRG Root X2",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "ISRG Root X2",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.chase.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 4154,
   "chain_horizon_is_lower_bound": true,
   "root_presented": true,
   "leaf_days_remaining": 126,
   "chain": [
    {
     "subject_cn": "www.chase.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-01-05",
     "het_han_tho": "Jan  5 23:59:59 2027 GMT",
     "con_ngay": 126,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global Root G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2038-01-15",
     "het_han_tho": "Jan 15 12:00:00 2038 GMT",
     "con_ngay": 4154,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.bankofamerica.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1400,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 159,
   "chain": [
    {
     "subject_cn": "www.bankofamerica.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-02-07",
     "het_han_tho": "Feb  7 23:59:59 2027 GMT",
     "con_ngay": 159,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.citi.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": null,
   "tls_version": "TLSv1.2",
   "certs_presented": 2,
   "chain_horizon_days": 1400,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 97,
   "chain": [
    {
     "subject_cn": "www.citi.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-12-07",
     "het_han_tho": "Dec  7 23:59:59 2026 GMT",
     "con_ngay": 97,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.wellsfargo.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1400,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 190,
   "chain": [
    {
     "subject_cn": "www.wellsfargo.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-03-10",
     "het_han_tho": "Mar 10 23:59:59 2027 GMT",
     "con_ngay": 190,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.capitalone.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1685,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 153,
   "chain": [
    {
     "subject_cn": "www.capitalone.com",
     "issuer_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2027-02-01",
     "het_han_tho": "Feb  1 23:59:59 2027 GMT",
     "con_ngay": 153,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "issuer_cn": "DigiCert Global Root G3",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2031-04-13",
     "het_han_tho": "Apr 13 23:59:59 2031 GMT",
     "con_ngay": 1685,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.americanexpress.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 4154,
   "chain_horizon_is_lower_bound": true,
   "root_presented": true,
   "leaf_days_remaining": 28,
   "chain": [
    {
     "subject_cn": "www.americanexpress.com",
     "issuer_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-09-29",
     "het_han_tho": "Sep 29 23:59:59 2026 GMT",
     "con_ngay": 28,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2031-03-29",
     "het_han_tho": "Mar 29 23:59:59 2031 GMT",
     "con_ngay": 1670,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global Root G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2038-01-15",
     "het_han_tho": "Jan 15 12:00:00 2038 GMT",
     "con_ngay": 4154,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.hsbc.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1400,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 161,
   "chain": [
    {
     "subject_cn": "www.hsbc.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-02-09",
     "het_han_tho": "Feb  9 23:59:59 2027 GMT",
     "con_ngay": 161,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.barclays.co.uk",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1400,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 64,
   "chain": [
    {
     "subject_cn": "www.barclays.co.uk",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-04",
     "het_han_tho": "Nov  4 23:59:59 2026 GMT",
     "con_ngay": 64,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.lloydsbank.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 4154,
   "chain_horizon_is_lower_bound": true,
   "root_presented": true,
   "leaf_days_remaining": 141,
   "chain": [
    {
     "subject_cn": "SCEP-DESKTOP-PROD-01.lloydsbank.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-01-20",
     "het_han_tho": "Jan 20 23:59:59 2027 GMT",
     "con_ngay": 141,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global Root G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2038-01-15",
     "het_han_tho": "Jan 15 12:00:00 2038 GMT",
     "con_ngay": 4154,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.natwest.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 4,
   "chain_horizon_days": 4157,
   "chain_horizon_is_lower_bound": true,
   "root_presented": true,
   "leaf_days_remaining": 169,
   "chain": [
    {
     "subject_cn": "natwest.com",
     "issuer_cn": "Sectigo Public Server Authentication CA OV R36",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-02-17",
     "het_han_tho": "Feb 17 23:59:59 2027 GMT",
     "con_ngay": 169,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Sectigo Public Server Authentication CA OV R36",
     "issuer_cn": "Sectigo Public Server Authentication Root R46",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 3072,
     "curve": null,
     "het_han": "2036-03-21",
     "het_han_tho": "Mar 21 23:59:59 2036 GMT",
     "con_ngay": 3489,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Sectigo Public Server Authentication Root R46",
     "issuer_cn": "USERTrust RSA Certification Authority",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2038-01-18",
     "het_han_tho": "Jan 18 23:59:59 2038 GMT",
     "con_ngay": 4157,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "USERTrust RSA Certification Authority",
     "issuer_cn": "USERTrust RSA Certification Authority",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2038-01-18",
     "het_han_tho": "Jan 18 23:59:59 2038 GMT",
     "con_ngay": 4157,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.santander.co.uk",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 4157,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 51,
   "chain": [
    {
     "subject_cn": "www.santander.co.uk",
     "issuer_cn": "Sectigo Public Server Authentication CA EV R36",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-10-22",
     "het_han_tho": "Oct 22 23:59:59 2026 GMT",
     "con_ngay": 51,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Sectigo Public Server Authentication CA EV R36",
     "issuer_cn": "Sectigo Public Server Authentication Root R46",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 3072,
     "curve": null,
     "het_han": "2036-03-21",
     "het_han_tho": "Mar 21 23:59:59 2036 GMT",
     "con_ngay": 3489,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Sectigo Public Server Authentication Root R46",
     "issuer_cn": "USERTrust RSA Certification Authority",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2038-01-18",
     "het_han_tho": "Jan 18 23:59:59 2038 GMT",
     "con_ngay": 4157,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.standardchartered.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 929,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 74,
   "chain": [
    {
     "subject_cn": "standardchartered.com",
     "issuer_cn": "GlobalSign Atlas R46 DV TLS CA 2026 Q3",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-14",
     "het_han_tho": "Nov 14 14:26:09 2026 GMT",
     "con_ngay": 74,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GlobalSign Atlas R46 DV TLS CA 2026 Q3",
     "issuer_cn": "GlobalSign Root R46",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2028-04-22",
     "het_han_tho": "Apr 22 00:00:00 2028 GMT",
     "con_ngay": 599,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GlobalSign Root R46",
     "issuer_cn": "GlobalSign",
     "sig_alg": "sha384WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2029-03-18",
     "het_han_tho": "Mar 18 00:00:00 2029 GMT",
     "con_ngay": 929,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.db.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1400,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 179,
   "chain": [
    {
     "subject_cn": "www.db.com",
     "issuer_cn": "DigiCert EV RSA CA G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2027-02-27",
     "het_han_tho": "Feb 27 23:59:59 2027 GMT",
     "con_ngay": 179,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert EV RSA CA G2",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2030-07-02",
     "het_han_tho": "Jul  2 12:42:50 2030 GMT",
     "con_ngay": 1400,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.bnpparibas.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1685,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 34,
   "chain": [
    {
     "subject_cn": "group.bnpparibas",
     "issuer_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-10-05",
     "het_han_tho": "Oct  5 23:59:59 2026 GMT",
     "con_ngay": 34,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G3 TLS ECC SHA384 2020 CA1",
     "issuer_cn": "DigiCert Global Root G3",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2031-04-13",
     "het_han_tho": "Apr 13 23:59:59 2031 GMT",
     "con_ngay": 1685,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.ing.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1198,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 63,
   "chain": [
    {
     "subject_cn": "ing.com",
     "issuer_cn": "HydrantID Server CA O1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-03",
     "het_han_tho": "Nov  3 04:59:14 2026 GMT",
     "con_ngay": 63,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "HydrantID Server CA O1",
     "issuer_cn": "IdenTrust Commercial Root CA 1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2029-12-12",
     "het_han_tho": "Dec 12 16:56:15 2029 GMT",
     "con_ngay": 1198,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.ubs.com",
   "group": "Banks (US / UK / EU)",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 2,
   "chain_horizon_days": 1670,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 83,
   "chain": [
    {
     "subject_cn": "www.ubs.com",
     "issuer_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-23",
     "het_han_tho": "Nov 23 23:59:59 2026 GMT",
     "con_ngay": 83,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
     "issuer_cn": "DigiCert Global Root G2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2031-03-29",
     "het_han_tho": "Mar 29 23:59:59 2031 GMT",
     "con_ngay": 1670,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "signal.org",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 903,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 34,
   "chain": [
    {
     "subject_cn": "signal.org",
     "issuer_cn": "WE1",
     "sig_alg": "ecdsa-with-SHA256",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-10-05",
     "het_han_tho": "Oct  5 17:16:42 2026 GMT",
     "con_ngay": 34,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "WE1",
     "issuer_cn": "GTS Root R4",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2029-02-20",
     "het_han_tho": "Feb 20 14:00:00 2029 GMT",
     "con_ngay": 903,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GTS Root R4",
     "issuer_cn": "GlobalSign Root CA",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-01-28",
     "het_han_tho": "Jan 28 00:00:42 2028 GMT",
     "con_ngay": 514,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "proton.me",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 36,
   "chain": [
    {
     "subject_cn": "proton.me",
     "issuer_cn": "YR2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2026-10-07",
     "het_han_tho": "Oct  7 13:13:52 2026 GMT",
     "con_ngay": 36,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR2",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "mail.proton.me",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 36,
   "chain": [
    {
     "subject_cn": "proton.me",
     "issuer_cn": "YR2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2026-10-07",
     "het_han_tho": "Oct  7 13:13:52 2026 GMT",
     "con_ngay": 36,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR2",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "mullvad.net",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 4,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 68,
   "chain": [
    {
     "subject_cn": "mullvad.net",
     "issuer_cn": "YE2",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-11-08",
     "het_han_tho": "Nov  8 08:31:49 2026 GMT",
     "con_ngay": 68,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YE2",
     "issuer_cn": "Root YE",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YE",
     "issuer_cn": "ISRG Root X2",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "ISRG Root X2",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "tailscale.com",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 20,
   "chain": [
    {
     "subject_cn": "tailscale.com",
     "issuer_cn": "YR1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-09-21",
     "het_han_tho": "Sep 21 18:00:46 2026 GMT",
     "con_ngay": 20,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR1",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "login.tailscale.com",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 4,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 61,
   "chain": [
    {
     "subject_cn": "login.tailscale.com",
     "issuer_cn": "YE1",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-11-01",
     "het_han_tho": "Nov  1 05:43:41 2026 GMT",
     "con_ngay": 61,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YE1",
     "issuer_cn": "Root YE",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YE",
     "issuer_cn": "ISRG Root X2",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "ISRG Root X2",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.eff.org",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": null,
   "tls_version": "TLSv1.2",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 79,
   "chain": [
    {
     "subject_cn": "*.eff.org",
     "issuer_cn": "YR2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-19",
     "het_han_tho": "Nov 19 08:58:35 2026 GMT",
     "con_ngay": 79,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR2",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.torproject.org",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 52,
   "chain": [
    {
     "subject_cn": "www.torproject.org",
     "issuer_cn": "YR1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2026-10-23",
     "het_han_tho": "Oct 23 00:03:12 2026 GMT",
     "con_ngay": 52,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR1",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.openssl.org",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 903,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 77,
   "chain": [
    {
     "subject_cn": "openssl.org",
     "issuer_cn": "WR3",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-17",
     "het_han_tho": "Nov 17 00:00:19 2026 GMT",
     "con_ngay": 77,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "WR3",
     "issuer_cn": "GTS Root R1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2029-02-20",
     "het_han_tho": "Feb 20 14:00:00 2029 GMT",
     "con_ngay": 903,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GTS Root R1",
     "issuer_cn": "GlobalSign Root CA",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2028-01-28",
     "het_han_tho": "Jan 28 00:00:42 2028 GMT",
     "con_ngay": 514,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.bouncycastle.org",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 72,
   "chain": [
    {
     "subject_cn": "*.openjce.org",
     "issuer_cn": "YR1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2026-11-12",
     "het_han_tho": "Nov 12 03:23:11 2026 GMT",
     "con_ngay": 72,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR1",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "sequoia-pgp.org",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": null,
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 2193,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 60,
   "chain": [
    {
     "subject_cn": "sequoia-pgp.org",
     "issuer_cn": "YR2",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2026-10-31",
     "het_han_tho": "Oct 31 09:47:33 2026 GMT",
     "con_ngay": 60,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "YR2",
     "issuer_cn": "Root YR",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 2048,
     "curve": null,
     "het_han": "2028-09-02",
     "het_han_tho": "Sep  2 23:59:59 2028 GMT",
     "con_ngay": 732,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "Root YR",
     "issuer_cn": "ISRG Root X1",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "rsaEncryption",
     "key_bits": 4096,
     "curve": null,
     "het_han": "2032-09-02",
     "het_han_tho": "Sep  2 23:59:59 2032 GMT",
     "con_ngay": 2193,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  },
  {
   "host": "www.cloudflare.com",
   "group": "Control: organisations that deliberately lead on cryptography",
   "negotiated_group": "X25519MLKEM768",
   "tls_version": "TLSv1.3",
   "certs_presented": 3,
   "chain_horizon_days": 903,
   "chain_horizon_is_lower_bound": true,
   "root_presented": false,
   "leaf_days_remaining": 86,
   "chain": [
    {
     "subject_cn": "www.cloudflare.com",
     "issuer_cn": "WE1",
     "sig_alg": "ecdsa-with-SHA256",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2026-11-26",
     "het_han_tho": "Nov 26 01:16:07 2026 GMT",
     "con_ngay": 86,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "WE1",
     "issuer_cn": "GTS Root R4",
     "sig_alg": "ecdsa-with-SHA384",
     "key_alg": "id-ecPublicKey",
     "key_bits": 256,
     "curve": "P-256",
     "het_han": "2029-02-20",
     "het_han_tho": "Feb 20 14:00:00 2029 GMT",
     "con_ngay": 903,
     "sig_hau_luong_tu": false
    },
    {
     "subject_cn": "GTS Root R4",
     "issuer_cn": "GlobalSign Root CA",
     "sig_alg": "sha256WithRSAEncryption",
     "key_alg": "id-ecPublicKey",
     "key_bits": 384,
     "curve": "P-384",
     "het_han": "2028-01-28",
     "het_han_tho": "Jan 28 00:00:42 2028 GMT",
     "con_ngay": 514,
     "sig_hau_luong_tu": false
    }
   ],
   "error": null
  }
 ]
}