ReadonlycoveredHost names that resolve to this server and that the certificate covers, best first.
ReadonlyhostReadonlyissuerWho issued it, such as the name of a certificate authority.
ReadonlynamesDNS and IP names from the subject alternative names, then the subject CN when there are none.
ReadonlyportOptional ReadonlypreviousFor changed: the fingerprint that was trusted before.
ReadonlyproblemReadonlysha256Colon-separated upper-case hex, as Node's fingerprint256 and most clients show it.
ReadonlyvalidISO 8601.
ReadonlyvalidISO 8601.
A TLS certificate that did not verify, as shown to a person. Every string comes from the server and is escaped before it is shown.