{"captured_at":"2026-10-23T11:06:44.872412+00:00","host":"matrix67.com","port":443,"scope":"同机连续 TLS 复测，不代表所有平台或浏览器验证路径","environment":{"os":"Windows","python":"3.12.14","python_openssl":"OpenSSL 3.5.8 25 Aug 2026","truststore":"0.10.5"},"python_probes":[{"context":"stdlib","check_hostname":true,"verify_mode":"CERT_REQUIRED","status":"verified","protocol":"TLSv1.3","issuer":[[["countryName","US"]],[["organizationName","Let's Encrypt"]],[["commonName","YR1"]]],"certificate_sha256":"60b3df7bead054f7eab6f112c4d2cae0cdf307acfc1a80323ead54f3ff388c86"},{"context":"truststore","check_hostname":true,"verify_mode":"CERT_REQUIRED","status":"verified","protocol":"TLSv1.3","issuer":[[["countryName","US"]],[["organizationName","Let's Encrypt"]],[["commonName","YR1"]]],"certificate_sha256":"60b3df7bead054f7eab6f112c4d2cae0cdf307acfc1a80323ead54f3ff388c86"}],"openssl":{"command":["openssl","s_client","-connect","matrix67.com:443","-servername","matrix67.com","-showcerts","-verify_return_error","-verify_hostname","matrix67.com"],"returncode":1,"stdout":"CONNECTED(00000004)\n---\nCertificate chain\n 0 s:CN=matrix67.com\n   i:C=US, O=Let's Encrypt, CN=YR1\n   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256\n   v:NotBefore: Sep 14 00:27:52 2026 GMT; NotAfter: Dec 13 00:27:51 2026 GMT\n-----BEGIN CERTIFICATE-----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\novvsfV1if50=\n-----END CERTIFICATE-----\n---\nno peer certificate available\n---\nNo client certificate CA names sent\nServer Temp Key: X25519, 253 bits\n---\nSSL handshake has read 1744 bytes and written 327 bytes\nVerification error: unable to get local issuer certificate\n---\nNew, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384\nThis TLS version forbids renegotiation.\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 20 (unable to get local issuer certificate)\n---\n","stderr":"Connecting to 206.189.151.137\ndepth=0 CN=matrix67.com\nverify error:num=20:unable to get local issuer certificate\n100000000A000000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:2091:\n","server_certificate_count":1},"loaded_ca_observation":{"captured_at":"2026-10-23T11:07:55.763728+00:00","stats":{"x509":55,"crl":0,"x509_ca":53},"matching_subjects":[[[["countryName","US"]],[["organizationName","Let's Encrypt"]],[["commonName","YR1"]]],[[["countryName","US"]],[["organizationName","Let's Encrypt"]],[["commonName","YR2"]]],[[["countryName","US"]],[["organizationName","ISRG"]],[["commonName","Root YR"]]]],"limitation":"仅观察当前默认上下文可见证书；没有清空系统存储或隔离证明缓存写入来源。"},"historical_observation":{"date":"2026-10-23","source":"首次排查的命令记录节选，不是本轮复测生成","stdlib_error":"[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1010)","node_error":"UNABLE_TO_VERIFY_LEAF_SIGNATURE","curl_error":"SEC_E_UNTRUSTED_ROOT (0x80090325)","truststore":"TLSv1.3 verified"}}