generated: '2026-08-12'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: www.divergent.us
  https: true
  tls_version: TLSv1.3
  cert_expires: Sep 14 18:52:51 2026 GMT
  hsts: true
  hsts_max_age: 63072000
domains:
- domain: divergent.us
  dnssec: true
  caa:
  - 0 issue "letsencrypt.org"
  - 0 issue "digicert.com"
  spf: true
  dmarc: true
  dmarc_policy: quarantine
x-legacy-domain:
  domain: divergent3d.com
  note: >-
    Divergent's former primary domain. The apex 301s to https://www.divergent.us/ but
    presents an EXPIRED TLS certificate, so any strict client aborts the handshake before
    it ever sees the redirect. www.divergent3d.com does not complete a TLS handshake at
    all (connection times out). Every inbound link, press release and search result still
    pointing at divergent3d.com is therefore broken for conforming clients. Recorded
    2026-08-12; observed with curl, which reported "SSL certificate problem: certificate
    has expired".
  apex_tls: expired
  apex_redirect_target: https://www.divergent.us/
  www_reachable: false