Looking at URL logging data from a Balance 20x (firmware 8.2) there are two sub-types. Some are type URL and others are type SSLCERT. What is the SSLCERT type and how is it different from URL type records?
The SSLCERT field is always followed by a URL, much like the URL type data records. Some examples
SSLCERT=setup.icloud.com DST=17.248.175.215 SPT=50319 DPT=443
SSLCERT=collector-pxhyx10rg3.perimeterx.net DST=35.190.10.96 SPT=50317 DPT=443
SSLCERT=doh.dns.apple.com DST=17.253.20.247 SPT=50316 DPT=443
SSLCERT=firebaselogging-pa.googleapis.com DST=74.125.21.95 SPT=50315 DPT=443