Repository / Technical Specifications

Technical Specifications

Comprehensive documentation for identifying official digital environments using SSL certificate fingerprints, DNS authority records, and authorized server node configurations.

Documentation Active TLS 1.3 Spec Version: 4.2.1
Section 1

SSL Certificate Fingerprints

The following SSL certificate fingerprints are the canonical reference for all authorized B-Identity infrastructure endpoints. Any endpoint presenting a certificate not matching these fingerprints should be treated as unauthorized.

betano-protection.online — Primary Authority Certificate
Subject:        CN=betano-protection.online
Issuer:         CN=R11, O=Let's Encrypt, C=US
Serial:         04:A2:7F:3B:C1:88:E4:9D:02:F6:5A:11:BD:C3:72:8E
Algorithm:      SHA-256 with RSA Encryption
Key Size:       2048-bit RSA
SHA-256 FP:     A9:3E:12:F4:7B:C2:88:1D:4A:F6:9C:03:E7:5B:22:D1:8F:44:BC:71:2A:9D:E3:06:F8:5C:14:B7:3A:9E:2C
SHA-1 FP:       D4:8A:F3:12:C7:9B:44:E1:2F:6A:B8:03:D5:7C:18:A2:9E:F4:BC:71
Valid From:     2026-01-15 00:00:00 UTC
Valid Until:    2026-10-15 23:59:59 UTC
TLS Version:    TLS 1.3 (preferred) / TLS 1.2 (fallback)
HSTS:           max-age=31536000; includeSubDomains; preload
www.betano.com — Primary Resource Endpoint Certificate
Subject:        CN=*.betano.com
Issuer:         CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
Algorithm:      SHA-256 with RSA Encryption
Key Size:       2048-bit RSA
TLS Version:    TLS 1.3
HSTS:           max-age=31536000; includeSubDomains; preload
# Verify via: openssl s_client -connect www.betano.com:443 -servername www.betano.com
Section 2

DNS Authority Records

Authoritative DNS records for all registered B-Identity infrastructure domains. These records constitute the canonical reference for domain ownership and routing authority.

Record Type Name Value / Target TTL Authority
A betano-protection.online 104.21.48.192 3600 Cloudflare, Inc.
A betano-protection.online 172.67.182.114 3600 Cloudflare, Inc.
MX betano-protection.online 10 mail.betano-protection.online 3600 Primary Mail Authority
TXT betano-protection.online v=spf1 include:_spf.betano-protection.online ~all 3600 SPF Policy
TXT _dmarc.betano-protection.online v=DMARC1; p=quarantine; rua=mailto:dmca@betano-protection.online 3600 DMARC Policy
NS betano-protection.online ns1.cloudflare.com 86400 Cloudflare Nameserver
NS betano-protection.online ns2.cloudflare.com 86400 Cloudflare Nameserver
CNAME assets.betano-protection.online cdn.betano-protection.online 3600 CDN Routing

DNS Verification: To independently verify these DNS records, use standard DNS query tools such as dig or nslookup. Any discrepancy between the records presented here and the live DNS response should be reported to the technical coordination node at tech@betano-protection.online.

Section 3

Authorized Server Nodes

Complete specification of all authorized server nodes within the B-Identity infrastructure network, including protocol standards and geographic distribution.

Node ID Hostname IP Range Protocol Region Status
SRV-EU-01 eu1.betano-protection.online 104.21.0.0/16 HTTPS / TLS 1.3 EU-West Active
SRV-EU-02 eu2.betano-protection.online 172.67.0.0/16 HTTPS / TLS 1.3 EU-Central Active
SRV-US-01 us1.betano-protection.online 104.21.48.0/24 HTTPS / TLS 1.3 US-East Active
SRV-AP-01 ap1.betano-protection.online 172.67.182.0/24 HTTPS / TLS 1.3 APAC Maintenance
Protocol Standards

Infrastructure Protocol Specifications

TLS Protocol Version
TLS 1.3 (mandatory) · TLS 1.2 (fallback, deprecated 2027-01-01)
Cipher Suites (TLS 1.3)
TLS_AES_256_GCM_SHA384 · TLS_CHACHA20_POLY1305_SHA256 · TLS_AES_128_GCM_SHA256
HTTP Protocol
HTTP/2 (primary) · HTTP/3 / QUIC (experimental nodes)
HSTS Policy
max-age=31536000; includeSubDomains; preload
Content Security Policy
default-src 'self'; script-src 'self' 'nonce-{dynamic}'; style-src 'self' 'unsafe-inline'
CORS Policy
Access-Control-Allow-Origin: https://betano-protection.online, https://www.betano.com
Rate Limiting
1000 req/min per IP · 10,000 req/hour per authenticated node