CRL & OCSP report for 0-apps-webofknowledge.com.library.ccf.org - library.ccf.org

library.ccf.org

Certificate details for library.ccf.org (At position 0 in certificate chain)
Serial number:
hex: fd0350f67e34efcb
int: 18231504736135475147
Issued by: Starfield Secure Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization unit: Domain Control Validated
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Check certificate compliance for 0-apps-webofknowledge.com.library.ccf.org.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.starfieldtech.com/sfig2s1-46.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.starfieldtech.com/sfig2s1-46.crl
Size: 46076 bytes (DER data)
Response time: 89.422873ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 1090

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [46076]
Content-Type: [application/pkix-crl]
Date: [Thu, 27 Apr 2017 23:39:51 GMT]
Etag: ["b3fc-54e2d71b90900"]
Expires: [Sun, 30 Apr 2017 23:39:51 GMT]
Last-Modified: [Thu, 27 Apr 2017 22:26:12 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.starfieldtech.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (POST)
Size: 1847 bytes (DER data)
Response time: 146.822422ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Validation Authority - G2
Issued by: Starfield Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 29h55m28s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEowSDBGMEQwQjAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM+uArAQUJUWB
aFAmOD07LSy+zWrZtj2zZmMCCQD9A1D2fjTvyw==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=107728, public, no-transform, must-revalidate]
Content-Length: [1847]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Thu, 27 Apr 2017 03:25:38 GMT]
Etag: ["b9ad365a9349a1dcd5b4063aa7a99e31e7a8f727"]
Expires: [Fri, 28 Apr 2017 10:55:36 GMT]
Last-Modified: [Wed, 26 Apr 2017 22:55:36 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.starfieldtech.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (GET)
Size: 1847 bytes (DER data)
Response time: 145.932791ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Validation Authority - G2
Issued by: Starfield Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 29h56m26s

Server and network information

Server Software: Apache

URL used for GET request

http:/MEowSDBGMEQwQjAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM%2BuArAQUJUWBaFAmOD07LSy%2BzWrZtj2zZmMCCQD9A1D2fjTvyw%3D%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEowSDBGMEQwQjAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM+uArAQUJUWB
aFAmOD07LSy+zWrZtj2zZmMCCQD9A1D2fjTvyw==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=107786, public, no-transform, must-revalidate]
Content-Length: [1847]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Thu, 27 Apr 2017 03:24:37 GMT]
Etag: ["b9ad365a9349a1dcd5b4063aa7a99e31e7a8f727"]
Expires: [Fri, 28 Apr 2017 10:55:36 GMT]
Last-Modified: [Wed, 26 Apr 2017 22:55:36 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Starfield Secure Certificate Authority - G2 (CA Certificate)

Certificate details for Starfield Secure Certificate Authority - G2 (At position 1 in certificate chain)
Serial number:
hex: 7
int: 7
Issued by: Starfield Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.starfieldtech.com/sfroot-g2.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.starfieldtech.com/sfroot-g2.crl
Size: 474 bytes (DER data)
Response time: 930.648149ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 0

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [474]
Content-Type: [application/pkix-crl]
Date: [Fri, 28 Apr 2017 00:25:00 GMT]
Etag: ["1da-543a28e8e32c0"]
Expires: [Mon, 01 May 2017 00:25:00 GMT]
Last-Modified: [Wed, 14 Dec 2016 18:32:19 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.starfieldtech.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (GET)
Size: 1781 bytes (DER data)
Response time: 45.427489ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Root Validation Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h47m52s

Server and network information

Server Software: Apache

URL used for GET request

http:/MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6%2FsVZNPaFToNfxx8ZwqAQUfAwyH6fZMH%2FEfWijYqihzqsHWycCAQc%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6/sVZNPaFToNfxx8ZwqAQUfAwy
H6fZMH/EfWijYqihzqsHWycCAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIG8QoBAKCCBuowggbmBgkrBgEFBQcwAQEEggbXMIIG0zCCAQuhgZEwgY4xCzAJ
BgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxl
MSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTEwLwYDVQQD
EyhTdGFyZmllbGQgUm9vdCBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyGA8yMDE3
MDQyODAwMDExNFowZDBiMDowCQYFKw4DAhoFAAQUFMD4hGUOv7FWTT2hU6DX8cfG
cKgEFHwMMh+n2TB/xH1oo2Kooc6rB1snAgEHgAAYDzIwMTcwNDI4MDAwMTE0WqAR
GA8yMDE3MDQyOTEyMDExNFowDQYJKoZIhvcNAQEFBQADggEBAFNZ5CdKfRkjhSpx
3SOyzU656n+0780TFRKkiEdyYOMcuDud9BT2BfiRAtjvcRb85Srz0A1UNG2CQ/gX
oRwD+77C/toeBN6EMTzVk1D3vuqDE7U2ExeMUXGNq1jsQGZXpYeDjNJt143uIpPn
oVKj8jsCQEkewqUPI3rt5s0zu9qMF8txDxx5q8lvzGyyCEe+jn5tVTPEBpXkJikX
AqGovBmgUJZ00XKu6piLUp21K932wn/tv5H6OW8HopjkIT68Ol1lZzXwWFddge9u
dqW/6asqgDr3BI5gzpHMp11rL2GbtrxSh3/YtDyW1uZamPfXof+cH8SMxvpdRizl
05POMomgggSsMIIEqDCCBKQwggOMoAMCAQICCQDNKqFyTzXZZjANBgkqhkiG9w0B
AQsFADCBjzELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcT
ClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIElu
Yy4xMjAwBgNVBAMTKVN0YXJmaWVsZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0
eSAtIEcyMB4XDTE2MTIxMzA3MDAwMFoXDTE3MTIxMzA3MDAwMFowgY4xCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw
IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTEwLwYDVQQDEyhT
dGFyZmllbGQgUm9vdCBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxK37MN9B3/4QMRIgfjEg4vMmQKA4WrJ
YpgyxWO9gfu8J2VTQQAa7YCXNiIiMptoZgttAW05/6iFqIuXp7BfTgUiZ1bpz3vl
SiJ75ecwZg5XJKdYche/+rp8VftGDCHnS84wIO4ocIKnHcythTmDSQ/cn4+y/2MT
Y1zSOQ54dBp2ulVOjwcYJajPtcIsUh8J2ONaSgMu7gHT/3J6E1oL5nCs7L1ydQQ2
GcT/7RYwihR04uQP8SrbgBNUFVcF7tDejj/uHNhY+gAGKCsekHqrW7UgukH5l7Yr
et1bPi33eT7KoLJudlUUq4lnLndVLg8OzN+JEd8gRmjZNkYGAhV9fwIDAQABo4IB
ADCB/TAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIGwDATBgNVHSUEDDAKBggr
BgEFBQcDCTAdBgNVHQ4EFgQUxYZKIX7Z8rV9oQGsrF5d/hWC978wDwYJKwYBBQUH
MAEFBAIFADBGBgNVHR8EPzA9MDugOaA3hjVodHRwOi8vY3JsLnN0YXJmaWVsZHRl
Y2guY29tL3JlcG9zaXRvcnkvc2Zyb290LWcyLmNybDBQBgNVHSAESTBHMEUGC2CG
SAGG/W4BBxcBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly9jcmwuc3RhcmZpZWxkdGVj
aC5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBALblQ8FGXaDBWFyl
4JaQaA3Zuwg2EGSEmPwOaTURv5j22huSEy6Zrl+PlGP8veb3L+VNzdGWu45VMaHu
6l5SmVq5Bfg3l3aOT4hs7v7NynsXcA240RrSxABRMK5JW10sEqrN/vEZ5oAlolv8
QBXIs6WOc03M0GqyYmX4BzB3Tr43jrWjBMWZaTPDLlR6UvTdknymljXvyzxr80GE
LavCUKETbtxH8cgn6ZNuXqVFxdllg2e4P0HhcHOGFIM7+wRIkk7eJZNspWiJK7Ff
vc9kvUvDrl2quYmnZC7gSvQOpdxsVJxXNP4JNjjKQ7S+KXs/8vVdez13HpUcdz4x
sE7zHaE=
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----
MIIEpDCCA4ygAwIBAgIJAM0qoXJPNdlmMA0GCSqGSIb3DQEBCwUAMIGPMQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEl
MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UEAxMp
U3RhcmZpZWxkIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTYx
MjEzMDcwMDAwWhcNMTcxMjEzMDcwMDAwWjCBjjELMAkGA1UEBhMCVVMxEDAOBgNV
BAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJm
aWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMTAvBgNVBAMTKFN0YXJmaWVsZCBSb290
IFZhbGlkYXRpb24gQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDErfsw30Hf/hAxEiB+MSDi8yZAoDhaslimDLFY72B+7wnZVNB
ABrtgJc2IiIym2hmC20BbTn/qIWoi5ensF9OBSJnVunPe+VKInvl5zBmDlckp1hy
F7/6unxV+0YMIedLzjAg7ihwgqcdzK2FOYNJD9yfj7L/YxNjXNI5Dnh0Gna6VU6P
BxglqM+1wixSHwnY41pKAy7uAdP/cnoTWgvmcKzsvXJ1BDYZxP/tFjCKFHTi5A/x
KtuAE1QVVwXu0N6OP+4c2Fj6AAYoKx6QeqtbtSC6QfmXtit63Vs+Lfd5Psqgsm52
VRSriWcud1UuDw7M34kR3yBGaNk2RgYCFX1/AgMBAAGjggEAMIH9MAwGA1UdEwEB
/wQCMAAwDgYDVR0PAQH/BAQDAgbAMBMGA1UdJQQMMAoGCCsGAQUFBwMJMB0GA1Ud
DgQWBBTFhkohftnytX2hAaysXl3+FYL3vzAPBgkrBgEFBQcwAQUEAgUAMEYGA1Ud
HwQ/MD0wO6A5oDeGNWh0dHA6Ly9jcmwuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3Np
dG9yeS9zZnJvb3QtZzIuY3JsMFAGA1UdIARJMEcwRQYLYIZIAYb9bgEHFwEwNjA0
BggrBgEFBQcCARYoaHR0cDovL2NybC5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0
b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAtuVDwUZdoMFYXKXglpBoDdm7CDYQZISY
/A5pNRG/mPbaG5ITLpmuX4+UY/y95vcv5U3N0Za7jlUxoe7qXlKZWrkF+DeXdo5P
iGzu/s3KexdwDbjRGtLEAFEwrklbXSwSqs3+8RnmgCWiW/xAFcizpY5zTczQarJi
ZfgHMHdOvjeOtaMExZlpM8MuVHpS9N2SfKaWNe/LPGvzQYQtq8JQoRNu3EfxyCfp
k25epUXF2WWDZ7g/QeFwc4YUgzv7BEiSTt4lk2ylaIkrsV+9z2S9S8OuXaq5iadk
LuBK9A6l3GxUnFc0/gk2OMpDtL4pez/y9V17PXcelRx3PjGwTvMdoQ==
-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=121672, public, no-transform, must-revalidate]
Content-Length: [1781]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Fri, 28 Apr 2017 00:26:38 GMT]
Etag: ["370c9bfdb58f6f603af90fcf0f3b41a72aa52414"]
Expires: [Sat, 29 Apr 2017 12:01:14 GMT]
Last-Modified: [Fri, 28 Apr 2017 00:01:14 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.starfieldtech.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (POST)
Size: 1781 bytes (DER data)
Response time: 46.320622ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Root Validation Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h47m24s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6/sVZNPaFToNfxx8ZwqAQUfAwy
H6fZMH/EfWijYqihzqsHWycCAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=121644, public, no-transform, must-revalidate]
Content-Length: [1781]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Fri, 28 Apr 2017 00:27:07 GMT]
Etag: ["370c9bfdb58f6f603af90fcf0f3b41a72aa52414"]
Expires: [Sat, 29 Apr 2017 12:01:14 GMT]
Last-Modified: [Fri, 28 Apr 2017 00:01:14 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Starfield Root Certificate Authority - G2 (CA Certificate)

Certificate details for Starfield Root Certificate Authority - G2 (At position 2 in certificate chain)
Serial number:
hex: 0
int: 0
Issued by: Starfield Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: Starfield Technologies, Inc.
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This is a self signed certificate

Check the revocation status for another website

Created by Paul van Brouwershaven
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.