CRL & OCSP report for 0-bender.lexisnexis.com.library.cooley.edu - library.cooley.edu

library.cooley.edu

Certificate details for library.cooley.edu (At position 0 in certificate chain)
Serial number:
hex: 94f898c5a369c7d6
int: 10734497686455175126
Issued by: Go Daddy Secure Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization unit: Domain Control Validated
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Check certificate compliance for 0-bender.lexisnexis.com.library.cooley.edu.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdig2s1-203.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdig2s1-203.crl
Size: 22754 bytes (DER data)
Response time: 67.52617ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 528

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [22754]
Content-Type: [application/pkix-crl]
Date: [Sun, 28 May 2017 18:17:29 GMT]
Etag: ["58e2-550859b019d40"]
Expires: [Wed, 31 May 2017 18:17:29 GMT]
Last-Modified: [Sat, 27 May 2017 18:27:25 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1777 bytes (DER data)
Response time: 48.273027ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Validation Authority - G2
Issued by: Go Daddy Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h40m25s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9
J47MNIMwojPX+2yz8LQsgM4CCQCU+JjFo2nH1g==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIG7QoBAKCCBuYwggbiBgkrBgEFBQcwAQEEggbTMIIGzzCB+6F6MHgxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRUw
EwYDVQQKEwxHb0RhZGR5IEluYy4xKzApBgNVBAMTIkdvIERhZGR5IFZhbGlkYXRp
b24gQXV0aG9yaXR5IC0gRzIYDzIwMTcwNTI4MTk1MDUzWjBsMGowQjAJBgUrDgMC
GgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX+2yz8LQsgM4C
CQCU+JjFo2nH1oAAGA8yMDE3MDUyODE5NTA1M1qgERgPMjAxNzA1MzAwNzUwNTNa
MA0GCSqGSIb3DQEBBQUAA4IBAQAq0cfiUVFhQhKJ1qYaDyjJr0oksLOJuM8LDPIg
4lEkNGFboD0V3sRVq7UIzyVQ2LRORBB4cJ2vMVr7oy2gfldWexwQG7OQpoaKgaVl
MRGmy3h3SB46cp88hXr40JvKkvtI9i9f9EhpnSKmoEDWcnSp1m3m2aB35gq4VGrx
lOobIxPI3b3u760QGXWpPqzQgCU8UtOxEoJd0szyB/OekdjlavEfvYs9Ecft0rhd
FlcgNXeA16OZmgWj1jskRexxhc19/7i8giu4P1YKKnKPMmFOKvA8ZlFUJK5X2SR+
CF3b7WwZjNPYADlBqmDHgPpSSQbOeroAC7utQHCOoHRMOK88oIIEuTCCBLUwggSx
MIIDmaADAgECAggzprL4sHhYYzANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UEBhMC
VVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNV
BAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMuZ29k
YWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3VyZSBD
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNjEyMTMwNzAwMDBaFw0xNzEy
MTMwNzAwMDBaMHgxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYD
VQQHEwpTY290dHNkYWxlMRUwEwYDVQQKEwxHb0RhZGR5IEluYy4xKzApBgNVBAMT
IkdvIERhZGR5IFZhbGlkYXRpb24gQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDDErfsw30Hf/hAxEiB+MSDi8yZAoDhaslimDLF
Y72B+7wnZVNBABrtgJc2IiIym2hmC20BbTn/qIWoi5ensF9OBSJnVunPe+VKInvl
5zBmDlckp1hyF7/6unxV+0YMIedLzjAg7ihwgqcdzK2FOYNJD9yfj7L/YxNjXNI5
Dnh0Gna6VU6PBxglqM+1wixSHwnY41pKAy7uAdP/cnoTWgvmcKzsvXJ1BDYZxP/t
FjCKFHTi5A/xKtuAE1QVVwXu0N6OP+4c2Fj6AAYoKx6QeqtbtSC6QfmXtit63Vs+
Lfd5Psqgsm52VRSriWcud1UuDw7M34kR3yBGaNk2RgYCFX1/AgMBAAGjggEAMIH9
MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgbAMBMGA1UdJQQMMAoGCCsGAQUF
BwMJMB0GA1UdDgQWBBTFhkohftnytX2hAaysXl3+FYL3vzAPBgkrBgEFBQcwAQUE
AgUAMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vcmVw
b3NpdG9yeS9tYXN0ZXJnb2RhZGR5Mmlzc3VpbmcuY3JsMEoGA1UdIARDMEEwPwYL
YIZIAYb9bQEHFwEwMDAuBggrBgEFBQcCARYiaHR0cDovL2NybC5nb2RhZGR5LmNv
bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAJv+j83K18m9ZGfccEvbd
p7T5javvXUHBJZi1uLl3JzQvktEOFtciLLIqCVk/6zbE4azA56XcAg6SEyRcoqej
rWoIMTeEfde/PvdmK6wHVL70bf7bIOjXNWnirXCY4w7b10QhsIkPQM9kGmn5udgo
e3TcBmAFDZNpmURNbOn2dAJQ3OpAhAQO7nx2WO9UGzu8NhU6QLtUJ2b1WVcmg1VA
d66CC0x2mn7tSvVBuE84MitMkHga2WMNfYOddw7rQj53wBlBEswn+IFGw6Q38G96
7qmG2ZdoadGEDv2Kq3Q0OnhJQCzpcBssK1r2GW8vbYILRVBYmTtnAKbqqqjIyfKC
jw==
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=121225, public, no-transform, must-revalidate]
Content-Length: [1777]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 28 May 2017 20:24:07 GMT]
Etag: ["ed9fcb1619916333ba6c790b372ed6f3f60b8f6b"]
Expires: [Tue, 30 May 2017 07:50:53 GMT]
Last-Modified: [Sun, 28 May 2017 19:50:53 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1777 bytes (DER data)
Response time: 45.952839ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Validation Authority - G2
Issued by: Go Daddy Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h40m25s

Server and network information

Server Software: Apache

URL used for GET request

http://ocsp.godaddy.com/MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQCU%2BJjFo2nH1g%3D%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9
J47MNIMwojPX+2yz8LQsgM4CCQCU+JjFo2nH1g==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=121225, public, no-transform, must-revalidate]
Content-Length: [1777]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 28 May 2017 20:24:07 GMT]
Etag: ["ed9fcb1619916333ba6c790b372ed6f3f60b8f6b"]
Expires: [Tue, 30 May 2017 07:50:53 GMT]
Last-Modified: [Sun, 28 May 2017 19:50:53 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Go Daddy Secure Certificate Authority - G2 (CA Certificate)

Certificate details for Go Daddy Secure Certificate Authority - G2 (At position 1 in certificate chain)
Serial number:
hex: 7
int: 7
Issued by: Go Daddy Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdroot-g2.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdroot-g2.crl
Size: 462 bytes (DER data)
Response time: 61.792506ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 0

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [462]
Content-Type: [application/pkix-crl]
Date: [Sun, 28 May 2017 20:21:31 GMT]
Etag: ["1ce-54ebba2754ac0"]
Expires: [Wed, 31 May 2017 20:21:31 GMT]
Last-Modified: [Fri, 05 May 2017 00:04:35 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1730 bytes (DER data)
Response time: 48.191811ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Root Validation Authority - G2
Issued by: Go Daddy Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 31h59m41s

Server and network information

Server Software: Apache

URL used for GET request

http://ocsp.godaddy.com/MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqF
BxBnKLbv9r0FQW4gwZTaD94CAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIGvgoBAKCCBrcwggazBgkrBgEFBQcwAQEEggakMIIGoDCB/6GBhTCBgjELMAkG
A1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUx
GjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMTAwLgYDVQQDEydHbyBEYWRkeSBS
b290IFZhbGlkYXRpb24gQXV0aG9yaXR5IC0gRzIYDzIwMTcwNTI4MDIyNDMyWjBk
MGIwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv
9r0FQW4gwZTaD94CAQeAABgPMjAxNzA1MjgwMjI0MzJaoBEYDzIwMTcwNTI5MTQy
NDMyWjANBgkqhkiG9w0BAQUFAAOCAQEAJ9TYAFyW1P8FdTvvQoaAzN06XHntu+Lv
JgnnmAS+ZV9osp0xP40Vjn54GeVf3JJI9eSb5zu3b5aRN1gItMNsyir+tzWlJu9x
142JB8pc9B3Bch+iBFWPe5fMi/VRvNkRZiMr9Rx7Asv/7tNI5vqVy89lR15Z12ou
kDPYA8UfDfjfQl50yMVZ5QJB5hmLpV/keKf5NxDJwbHVNIx5kGcAGpr71XQJqhKN
9XpQ/qPEygkiCdkLk4ja6Ymi1V3p2ySGjF2A2QPEhTL8Qluqwmf6KOyGQlyZ2jbB
ZnSo4IfVZdesoxchK6TWCL1KXK9EL11E9heABGorCjpVkvFZEbebTKCCBIYwggSC
MIIEfjCCA2agAwIBAgIIAlR8ANLxDDcwDQYJKoZIhvcNAQELBQAwgYMxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UEAxMoR28gRGFkZHkgUm9v
dCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNjEyMTMwNzAwMDBaFw0x
NzEyMTMwNzAwMDBaMIGCMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTET
MBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4x
MDAuBgNVBAMTJ0dvIERhZGR5IFJvb3QgVmFsaWRhdGlvbiBBdXRob3JpdHkgLSBH
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMSt+zDfQd/+EDESIH4
xIOLzJkCgOFqyWKYMsVjvYH7vCdlU0EAGu2AlzYiIjKbaGYLbQFtOf+ohaiLl6ew
X04FImdW6c975Uoie+XnMGYOVySnWHIXv/q6fFX7Rgwh50vOMCDuKHCCpx3MrYU5
g0kP3J+Psv9jE2Nc0jkOeHQadrpVTo8HGCWoz7XCLFIfCdjjWkoDLu4B0/9yehNa
C+ZwrOy9cnUENhnE/+0WMIoUdOLkD/Eq24ATVBVXBe7Q3o4/7hzYWPoABigrHpB6
q1u1ILpB+Ze2K3rdWz4t93k+yqCybnZVFKuJZy53VS4PDszfiRHfIEZo2TZGBgIV
fX8CAwEAAaOB9DCB8TAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIGwDATBgNV
HSUEDDAKBggrBgEFBQcDCTAdBgNVHQ4EFgQUxYZKIX7Z8rV9oQGsrF5d/hWC978w
DwYJKwYBBQUHMAEFBAIFADBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8vY3JsLmdv
ZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2Ryb290LWcyLmNybDBKBgNVHSAEQzBBMD8G
C2CGSAGG/W0BBxcBMDAwLgYIKwYBBQUHAgEWImh0dHA6Ly9jcmwuZ29kYWRkeS5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAD3O7aHU0cx8Ued53GtJ
JB/vo1RAf2ZmxW3Q3wUxG/ON/dGDXOMRFDEwla5UluC3zWWytZ1Go9WVaN1k8w5Q
7dN1puQIVbbOwy2OYtZlbqQT9RnPwMwwYSyfb9QNdDdPurf0eClCr/Q54fk5BKBy
rmw3msFD53d39C/GVbP3ulhLKIo64A68ENIJpFrBG2iQSFEBv1ohbRedCn11bD2b
d82aOnwWKlPVx87RLOo3UiU/MNRsCdlhzEPF14FNPpvmdPO5NweVBCfj7iOqMeNw
D8pauPYhnpApYDVfkDffUAbUr7YrdSxjJvZHt3D2rgU+kkYJc+hC3ze30906Xg0P
wkI=
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=115181, public, no-transform, must-revalidate]
Content-Length: [1730]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 28 May 2017 04:43:48 GMT]
Etag: ["af6d6ce1e84fbba76ca6f696ea0bcdf6b94f540b"]
Expires: [Mon, 29 May 2017 14:24:32 GMT]
Last-Modified: [Sun, 28 May 2017 02:24:32 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1730 bytes (DER data)
Response time: 46.677434ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Root Validation Authority - G2
Issued by: Go Daddy Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 32h0m16s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqF
BxBnKLbv9r0FQW4gwZTaD94CAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=115216, public, no-transform, must-revalidate]
Content-Length: [1730]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 28 May 2017 04:43:12 GMT]
Etag: ["af6d6ce1e84fbba76ca6f696ea0bcdf6b94f540b"]
Expires: [Mon, 29 May 2017 14:24:32 GMT]
Last-Modified: [Sun, 28 May 2017 02:24:32 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Go Daddy Root Certificate Authority - G2 (CA Certificate)

Certificate details for Go Daddy Root Certificate Authority - G2 (At position 2 in certificate chain)
Serial number:
hex: 1be715
int: 1828629
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: GoDaddy.com, Inc.
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdroot.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdroot.crl
Size: 429 bytes (DER data)
Response time: 44.685767ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 0

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [429]
Content-Type: [application/pkix-crl]
Date: [Sun, 28 May 2017 04:39:46 GMT]
Etag: ["1ad-54ebba2754ac0"]
Expires: [Wed, 31 May 2017 04:39:46 GMT]
Last-Modified: [Fri, 05 May 2017 00:04:35 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1697 bytes (DER data)
Response time: 196.990269ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Root Validation Authority - G1
Signing certificate validity: 2016-12-13 - 2021-12-13
Signing certificate algorithm: SHA1-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 30h25m15s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw
0pHUTBFxs2HLPaH+3ahq1OMCAxvnFQ==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=109515, public, no-transform, must-revalidate]
Content-Length: [1697]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 28 May 2017 15:50:08 GMT]
Etag: ["4464775974c4a9c992b176f5d36c934061741bc6"]
Expires: [Mon, 29 May 2017 23:51:27 GMT]
Last-Modified: [Sun, 28 May 2017 11:51:27 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1697 bytes (DER data)
Response time: 194.163932ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Root Validation Authority - G1
Signing certificate validity: 2016-12-13 - 2021-12-13
Signing certificate algorithm: SHA1-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 30h25m15s

Server and network information

Server Software: Apache

URL used for GET request

http://ocsp.godaddy.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH%2B3ahq1OMCAxvnFQ%3D%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw
0pHUTBFxs2HLPaH+3ahq1OMCAxvnFQ==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=109515, public, no-transform, must-revalidate]
Content-Length: [1697]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 28 May 2017 15:50:08 GMT]
Etag: ["4464775974c4a9c992b176f5d36c934061741bc6"]
Expires: [Mon, 29 May 2017 23:51:27 GMT]
Last-Modified: [Sun, 28 May 2017 11:51:27 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

[The Go Daddy Group, Inc.] (CA Certificate)

Certificate details for certificate with serial number 0 (At position 3 in certificate chain)
Serial number:
hex: 0
int: 0
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: The Go Daddy Group, Inc.
Organization unit: Go Daddy Class 2 Certification Authority
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This is a self signed certificate

Check the revocation status for another website

Created by Paul van Brouwershaven
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.