diff --git a/checker/rule.go b/checker/rule.go
index 310c283..4c3d105 100644
--- a/checker/rule.go
+++ b/checker/rule.go
@@ -69,11 +69,11 @@ func (r *tlsRule) Evaluate(ctx context.Context, obs sdk.ObservationGetter, opts
 func evaluateProbe(p TLSProbe) sdk.CheckState {
 	subject := fmt.Sprintf("%s://%s", p.Type, p.Endpoint)
 	meta := map[string]any{
-		"type":     p.Type,
-		"host":     p.Host,
-		"port":     p.Port,
-		"sni":      p.SNI,
-		"issues":   len(p.Issues),
+		"type":   p.Type,
+		"host":   p.Host,
+		"port":   p.Port,
+		"sni":    p.SNI,
+		"issues": len(p.Issues),
 	}
 	if p.TLSVersion != "" {
 		meta["tls_version"] = p.TLSVersion
diff --git a/checker/types.go b/checker/types.go
index 58bd547..3509d23 100644
--- a/checker/types.go
+++ b/checker/types.go
@@ -56,17 +56,17 @@ type TLSProbe struct {
 	// IssuerAKI is the uppercase hex of the leaf's Authority Key Identifier
 	// extension (i.e. the issuer cert's SKI). This is the primary lookup key
 	// into the CCADB CAA Identifiers CSV ("Subject Key Identifier (Hex)").
-	IssuerAKI     string    `json:"issuer_aki,omitempty"`
-	Subject       string    `json:"subject,omitempty"`
-	DNSNames      []string  `json:"dns_names,omitempty"`
+	IssuerAKI string   `json:"issuer_aki,omitempty"`
+	Subject   string   `json:"subject,omitempty"`
+	DNSNames  []string `json:"dns_names,omitempty"`
 	// Chain carries one entry per certificate presented by the server
 	// (leaf first, then intermediates in order). Each entry precomputes
 	// the four TLSA selector×matching_type hashes plus the raw DER so
 	// DANE consumers can match without re-handshaking or re-parsing.
-	Chain         []CertInfo `json:"chain,omitempty"`
-	ElapsedMS     int64     `json:"elapsed_ms,omitempty"`
-	Error         string    `json:"error,omitempty"`
-	Issues        []Issue   `json:"issues,omitempty"`
+	Chain     []CertInfo `json:"chain,omitempty"`
+	ElapsedMS int64      `json:"elapsed_ms,omitempty"`
+	Error     string     `json:"error,omitempty"`
+	Issues    []Issue    `json:"issues,omitempty"`
 }
 
 // CertInfo describes one certificate in the presented chain together with
diff --git a/go.mod b/go.mod
index e64fa23..bde2901 100644
--- a/go.mod
+++ b/go.mod
@@ -2,4 +2,4 @@ module git.happydns.org/checker-tls
 
 go 1.25.0
 
-require git.happydns.org/checker-sdk-go v1.3.0
+require git.happydns.org/checker-sdk-go v1.4.0
diff --git a/go.sum b/go.sum
index fe4952c..072aab1 100644
--- a/go.sum
+++ b/go.sum
@@ -1,2 +1,2 @@
-git.happydns.org/checker-sdk-go v1.3.0 h1:FG2kIhlJCzI0m35EhxSgn4UWc9M4ha6aZTeoChu4l7A=
-git.happydns.org/checker-sdk-go v1.3.0/go.mod h1:aNAcfYFfbhvH9kJhE0Njp5GX0dQbxdRB0rJ0KvSC5nI=
+git.happydns.org/checker-sdk-go v1.4.0 h1:sO8EnF3suhNgYLRsbmCZWJOymH/oNMrOUqj3FEzJArs=
+git.happydns.org/checker-sdk-go v1.4.0/go.mod h1:aNAcfYFfbhvH9kJhE0Njp5GX0dQbxdRB0rJ0KvSC5nI=