{
  "schema_version": "0.3",
  "id": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
  "type": "fingerprint",
  "label": "cert:37520eddd517",
  "aliases": [],
  "description": "Let's Encrypt certificate (CN *.fsf.org, valid 2026-10-05 to 2027-01-03) served by fsf.org.",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": "cert",
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "certificate_of": 1
  },
  "claims": [
    {
      "id": "k_208fd1a798f2be8ce76e9f1c474d11b8",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "cert_san",
      "object": {
        "id": "domain:fsf.org",
        "label": "fsf.org",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-05",
      "valid_to": "2027-01-03",
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:subjectAltName",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_9e3a76100fe36604422e5a8e1082d766",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "cert_san",
      "object": {
        "id": "host:member.fsf.org",
        "label": "member.fsf.org",
        "type": "host"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-05",
      "valid_to": "2027-01-03",
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:subjectAltName",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_62003d457585a1f6816688828d6eb0fe",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "cert_san",
      "object": {
        "id": "host:members.fsf.org",
        "label": "members.fsf.org",
        "type": "host"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-05",
      "valid_to": "2027-01-03",
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:subjectAltName",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_b51f305161c01c42a6b45a5c9eaa5212",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "cert_san",
      "object": {
        "id": "host:office.fsf.org",
        "label": "office.fsf.org",
        "type": "host"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-05",
      "valid_to": "2027-01-03",
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:subjectAltName",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_bb1e2aaf006f9425305acfb1c226b5e1",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "certificate_issuer",
      "object": {
        "id": "internet-security-research-group",
        "label": "Internet Security Research Group",
        "type": "organization"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-05",
      "valid_to": "2027-01-03",
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:issuer",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_c58718ab34a5d66ada06897f4686237e",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "first_seen",
      "object": null,
      "value": "2026-10-20",
      "datatype": "date",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:leaf",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_6d90b1d21210c459198994363e8562a4",
      "revision": 1,
      "subject": "fp:cert:37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747",
      "predicate": "certificate_of",
      "object": {
        "id": "domain:fsf.org",
        "label": "fsf.org",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-05",
      "valid_to": "2027-01-03",
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:09:23Z",
      "evidence": [
        {
          "url": "https://fsf.org/",
          "capture": {
            "store": "ev",
            "sha256": "37520eddd5179b31c8a3ed694b25f7470a979176884d145e099917a9c5f60747"
          },
          "retrieved_at": "2026-10-20T14:09:23Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:leaf",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_44ea4e86c8c692ad1d4b2135e2df6b44"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-20T14:30:00Z",
  "updated_at": "2026-10-20T14:30:00Z",
  "content_hash": "ca8a4c019358c8bcff116e008fe32ab0481790dc1187151733dc88889ed6e604",
  "license": "EW-ATTR-1.0"
}