# Oracle regression sentinel — run 2026-09-25T19:31:34Z

Oracle under watch: `https://getunstuck.space/unstuck/api`

| URL | expect | oracle TLS | truth TLS | verdict | detail |
|---|---|---|---|---|---|
| https://example.com | valid | invalid | valid (SSL Corporation, 32d) |  **FALSE-NEG** | oracle=invalid truth=valid (issuer=SSL Corporation) |
| https://example.org | valid | invalid | valid (SSL Corporation, 32d) |  **FALSE-NEG** | oracle=invalid truth=valid (issuer=SSL Corporation) |
| https://nano.org | valid | invalid | valid (Google Trust Services, 37d) |  **FALSE-NEG** | oracle=invalid truth=valid (issuer=Google Trust Services) |
| https://en.wikipedia.org | valid | invalid | valid (Let's Encrypt, 38d) |  **FALSE-NEG** | oracle=invalid truth=valid (issuer=Let's Encrypt) |
| https://httpbin.org | valid | valid (Amazon, 99d) | valid (Amazon, 99d) | MATCH | both valid |
| https://github.com | valid | null | valid (Sectigo Limited, 65d) |  **ORACLE-ERR** | fetch: The read operation timed out |
| https://getunstuck.space | valid | invalid | valid (Let's Encrypt, 81d) |  **FALSE-NEG** | oracle=invalid truth=valid (issuer=Let's Encrypt) |
| https://expired.badssl.com | invalid | null | invalid |  **REFUSES-BAD** | oracle errors on invalid chain: certificate has expired |
| https://self-signed.badssl.com | invalid | null | invalid |  **REFUSES-BAD** | oracle errors on invalid chain: self-signed certificate; if the root CA is installed local |
| https://wrong.host.badssl.com | invalid | null | invalid |  **REFUSES-BAD** | oracle errors on invalid chain: Hostname/IP does not match certificate's altnames: Host: w |
| http://neverssl.com | null | null | null | MATCH | both report no TLS layer |

## Counts
- FALSE-NEG: 5
- MATCH: 2
- ORACLE-ERR: 1
- REFUSES-BAD: 3

REGRESSION PRESENT: FALSE-NEG