I'm personally using the small Qwen 3.5 models. If you have an OCR problem, Mistral OCR 4 is probably great. Open weights models that you can run a laptop may also work great.

https://www.ssllabs.com/ssltest/analyze.html?d=mistral.ai&la...

Looks good so far, A+ on ipv4 as well as ipv6

Edit: I also asked Gemini 3.1 Pro to analyze the certificate and it looks good

It looks like you have shared an `about:certificate` URL containing a chain of three Base64-encoded X.509 TLS/SSL certificates. This specific chain is used to secure connections to *mistral.ai*.

Here is the decoded breakdown of the certificate chain you provided:

## Certificate Chain Overview

This is a standard three-tier certificate chain issued by Google Trust Services for the Mistral AI domain.

---

### 1. Leaf Certificate (End-Entity)

This is the specific certificate issued to the website to verify its identity and encrypt traffic.

* *Subject (Common Name):* `mistral.ai` * *Subject Alternative Names (SANs):* `mistral.ai`, `workers.mistral.ai` * *Issuer:* WE1 (Google Trust Services) * *Valid From:* June 13, 2026 * *Valid To:* September 11, 2026 * *Key Type:* Elliptic Curve (ECDSA)

### 2. Intermediate Certificate

This certificate acts as a bridge between the website's certificate and the trusted Root CA.

* *Subject:* WE1 (Google Trust Services) * *Issuer:* GTS Root R4 (Google Trust Services LLC) * *Valid From:* December 13, 2023 * *Valid To:* February 20, 2029 * *Key Type:* Elliptic Curve (ECDSA)

### 3. Root Certificate

This is the foundational trust anchor pre-installed in browsers and operating systems.

* *Subject:* GTS Root R4 (Google Trust Services LLC) * *Issuer:* GTS Root R4 (Self-signed) * *Valid From:* June 22, 2016 * *Valid To:* June 22, 2036 * *Key Type:* Elliptic Curve (ECDSA)

Opus 4.8 scanned hundreds of PDFs for me recently with the worst handwriting imaginable. 100% successful, other than one record where even I could not figure out what was written.