> For the complete documentation index, see [llms.txt](https://docs.halosecurity.com/api/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.halosecurity.com/api/events-archive/website-cert-new-country.md).

# website-cert-new-country

### Overview

* **Key:** `website-cert-new-country`
* **Name:** SSL Certificate New Country
* **Triggers when:** The TLS or SSL certificate country code detected during the website doesn't match that of the previous scan

### Fields

| Field             | Type    | Description            |
| ----------------- | ------- | ---------------------- |
| cert\_issuer\_c   | string  | Issuer country         |
| cert\_issuer\_cn  | string  | Issuer common name     |
| cert\_subject\_cn | string  | Subject common name    |
| country           | string  | Newly detected country |
| host              | string  | Hostname               |
| scan\_id          | string  | ID of the scan         |
| target\_id        | integer | ID of the target       |

### Example data

```json
{
  "cert_issuer_c": "US",
  "cert_issuer_cn": "R3",
  "cert_subject_cn": "www.example.com",
  "country": "US",
  "host": "www.example.com",
  "scan_id": "202101010000x1Xx2Xx3Xx4Xx5Xx6Xx7",
  "target_id": 123456
}
```