=            key |  Label text
=----------------+------------------------------------------------------------
           after - Certificate valid until
            alpn - Target's selected protocol (ALPN)
           alpns - Target's supported ALPNs
         altname - Certificate Subject's Alternate Names
             aux - Certificate Trust Information
          before - Certificate valid since
       cert_type - Certificate Type (bitmask)
     certversion - Certificate Version
           chain - Certificate Chain
    chain_verify - CA Chain Verification (trace)
 cipher_selected - Selected Cipher
         ciphers - Client Ciphers
   ciphers_local - Local SSLlib Ciphers
              cn - Certificate Common Name
        cn_nosni - Certificate CN without SNI
     compression - Target supports Compression
           dates - Certificate Validity (date)
    dh_parameter - Target's DH Parameter
      dtlsfamily - Target default --dummy-- cipher
         dtlsv09 - Target default DTLS 0.9 cipher
          dtlsv1 - Target default DTLS 1.0 cipher
         dtlsv11 - Target default DTLS 1.1 cipher
         dtlsv12 - Target default DTLS 1.2 cipher
         dtlsv13 - Target default DTLS 1.3 cipher
           email - Certificate Email Addresses
     error_depth - CA Chain Verification error in level
    error_verify - CA Chain Verification error
       expansion - Target supports Expansion
   ext_authority - Certificate extensions Authority Information Access
 ext_authorityid - Certificate extensions Authority key Identifier
    ext_certtype - Certificate extensions Netscape Cert Type
 ext_constraints - Certificate extensions Basic Constraints
         ext_cps - Certificate extensions Certificate Policies
     ext_cps_cps - Certificate extensions Certificate Policies: CPS
  ext_cps_notice - Certificate extensions Certificate Policies: User Notice
  ext_cps_policy - Certificate extensions Certificate Policies: Policy
         ext_crl - Certificate extensions CRL Distribution Points
 ext_extkeyusage - Certificate extensions Extended Key Usage
      ext_issuer - Certificate extensions Issuer Alternative Name
    ext_keyusage - Certificate extensions Key Usage
ext_subjectkeyid - Certificate extensions Subject Key Identifier
      extensions - Certificate extensions
        fallback - Target default cipher cipher
fallback_protocol - Target's fallback SSL Protocol
     fingerprint - Certificate Fingerprint
fingerprint_hash - Certificate Fingerprint Hash Value
 fingerprint_md5 - Certificate Fingerprint  MD5
fingerprint_sha1 - Certificate Fingerprint SHA1
fingerprint_sha2 - Certificate Fingerprint SHA2
fingerprint_type - Certificate Fingerprint Algorithm
       heartbeat - Target supports Heartbeat
  hsts_httpequiv - HTTPS STS in http-equiv
     hsts_maxage - HTTPS STS MaxAge
    hsts_preload - HTTPS STS preload
     hsts_subdom - HTTPS STS include sub-domains
   http_location - HTTP Location header
  http_protocols - HTTP Alternate-Protocol
    http_refresh - HTTP Refresh header
     http_status - HTTP Status line
        http_sts - HTTP STS header
        http_svc - HTTP Alt-Svc header
    https_alerts - HTTPS Error alerts
      https_body - HTTPS Body
  https_location - HTTPS Location header
      https_pins - HTTPS Public-Key-Pins header
 https_protocols - HTTPS Alternate-Protocol
   https_refresh - HTTPS Refresh header
    https_server - HTTPS Server banner
    https_status - HTTPS Status line
       https_sts - HTTPS STS header
       https_svc - HTTPS Alt-Svc header
          issuer - Certificate Issuer
     issuer_hash - Certificate Issuer Name Hash
            krb5 - Target supports Krb5
      master_key - Target's Master-Key
   master_secret - Target supports Extended Master Secret
         modulus - Certificate Public Key Modulus
modulus_exponent - Certificate Public Key Exponent
     modulus_len - Certificate Public Key Length
  next_protocols - Target's advertised protocols
             npn - Target's selected protocol  (NPN)
            npns - Target's supported  NPNs
ocsp_cert_status - Target's OCSP Response Cert Status
ocsp_next_update - Target's OCSP Response Next Update
ocsp_public_hash - Certificate OCSP Public Key Hash
   ocsp_response - Target's OCSP Response
ocsp_response_data - Target's OCSP Response Data
ocsp_response_status - Target's OCSP Response Status
ocsp_subject_hash - Certificate OCSP Subject Hash
ocsp_this_update - Target's OCSP Response This Update
        ocsp_uri - Certificate OCSP Responder URL
          ocspid - Certificate OCSP Hashes
         options - internal used SSL options bitmask
             pem - Certificate PEM
        psk_hint - Target supports PSK Identity Hint
    psk_identity - Target supports PSK
          pubkey - Certificate Public Key
pubkey_algorithm - Certificate Public Key Algorithm
    pubkey_value - Certificate Public Key Value
  public_key_len - Target's Server public key length
   renegotiation - Target supports Renegotiation
      resumption - Target supports Resumption
      selfsigned - Certificate Validity (signature)
          serial - Certificate Serial Number
      serial_hex - Certificate Serial Number (hex)
      serial_int - Certificate Serial Number (int)
      session_id - Target's Session-ID
  session_id_ctx - Target's Session-ID-ctx
session_lifetime - Target's TLS Session Ticket Lifetime
session_protocol - Target's selected SSL Protocol
session_startdate - Target's TLS Session Start Time locale
session_starttime - Target's TLS Session Start Time EPOCH
  session_ticket - Target's TLS Session Ticket
 session_timeout - Target's TLS Session Timeout
         sigdump - Certificate Signature (hexdump)
      sigkey_len - Certificate Signature Key Length
    sigkey_value - Certificate Signature Key Value
         signame - Certificate Signature Algorithm
             srp - Target supports SRP
           sslv2 - Target default SSL 2.0  cipher
           sslv3 - Target default SSL 3.0  cipher
      sslversion - Selected SSL Protocol
         subject - Certificate Subject
    subject_hash - Certificate Subject Name Hash
            text - Certificate PEM decoded
          tls1ff - Target default --dummy-- cipher
tls_fallback_scsv - Target default SCSV cipher
     tlsextdebug - TLS extensions (debug)
   tlsextensions - TLS extensions
           tlsv1 - Target default TLS 1.0  cipher
          tlsv11 - Target default TLS 1.1  cipher
          tlsv12 - Target default TLS 1.2  cipher
          tlsv13 - Target default TLS 1.3  cipher
        trustout - Certificate trusted
      valid_days - certificate validity in days
      valid_host - dummy used for printing DNS stuff
    valid_months - certificate validity in months
     valid_years - certificate validity in years
          verify - Validity Certificate Chain
  verify_altname - Validity Alternate Names
 verify_hostname - Validity Hostname
=----------------+------------------------------------------------------------
