Evidence row 544824

What was observed

{
  "count": 1,
  "tools": [
    {
      "description": "Opens its own TLS handshakes to one public host with openssl, using the URL's explicit port or 443 by default, and reports what they establish: which of TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0 and SSLv3 the server accepts, a protocol-support grade, and the certificate the server actually serves (subject, issuer, covered hostnames, hostname match, and validity dates). Reach for it on padlock, HTTPS, 'Not Secure', certificate-expiry and wrong-hostname questions, and to inspect which certificate is served after a renewal on the probed endpoint; this does not verify every load-balanced node. It does not fetch the page or establish whether plain HTTP is actually served or redirected, and it is not a browser trust decision: no chain-of-trust build, no revocation check, no cipher-suite inspection. Measured 0.05-1.5 seconds against real hosts; each probe is cut off at 12 seconds.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "url": {
            "description": "Full public URL of the site to probe. Its hostname and explicit port drive the handshakes; port 443 is used when no port is named. The submitted scheme is reported, but the page is never fetched and plain-HTTP serving or redirects are not tested",
            "pattern": "^https?://",
            "type": "string"
          }
        },
        "required": [
          "url"
        ],
        "type": "object"
      },
      "name": "ssl_check"
    }
  ]
}

What the leaf hashes

{"body":"aafa0aaddb44c05eaf27bb6ef37f4e9233d6705ec0e9822ad6312e7759d4387a","id":544824,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793132167464579,"prev":null,"subject":"a1930a7b-9334-4978-b710-8653dadb238d","subject_kind":"endpoint"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.