CRL & OCSP report for 0-global.factiva.com.sslib.cpce-polyu.edu.hk - lib.cpce-polyu.edu.hk

One of the certificates in this chain can't be trusted!

One or more certificate in this chain can't be trusted because of revocation or an server error. Revoked certificates can't be trusted and will cause errors like "NET::ERR_CERT_REVOKED" in browsers

lib.cpce-polyu.edu.hk

Certificate details for lib.cpce-polyu.edu.hk (At position 0 in certificate chain)
Serial number:
hex: 2b73fc1da172b0
int: 12230950664630960
Issued by: Go Daddy Secure Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization unit: Domain Control Validated
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Check certificate compliance for 0-global.factiva.com.sslib.cpce-polyu.edu.hk.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdig2s1-87.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdig2s1-87.crl
Size: 2516761 bytes (DER data)
Response time: 1.616369744s
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 61593

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [2516761]
Content-Type: [application/pkix-crl]
Date: [Tue, 27 Jun 2017 00:04:23 GMT]
Etag: ["266719-552d2f1bf2900"]
Expires: [Fri, 30 Jun 2017 00:04:23 GMT]
Last-Modified: [Mon, 26 Jun 2017 01:33:56 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Revoked

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1799 bytes (DER data)
Response time: 1.015069943s
Signature algorithm: SHA1WithRSA
Signature type: CA Delegated
Signed by: Go Daddy Validation Authority - G2
Issued by: Go Daddy Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Revoked

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h47m30s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEgwRjBEMEIwQDAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9
J47MNIMwojPX+2yz8LQsgM4CBytz/B2hcrA=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----
MIIEsTCCA5mgAwIBAgIIM6ay+LB4WGMwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTYxMjEzMDcwMDAwWhcN
MTcxMjEzMDcwMDAwWjB4MQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTET
MBEGA1UEBxMKU2NvdHRzZGFsZTEVMBMGA1UEChMMR29EYWRkeSBJbmMuMSswKQYD
VQQDEyJHbyBEYWRkeSBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxK37MN9B3/4QMRIgfjEg4vMmQKA4WrJ
YpgyxWO9gfu8J2VTQQAa7YCXNiIiMptoZgttAW05/6iFqIuXp7BfTgUiZ1bpz3vl
SiJ75ecwZg5XJKdYche/+rp8VftGDCHnS84wIO4ocIKnHcythTmDSQ/cn4+y/2MT
Y1zSOQ54dBp2ulVOjwcYJajPtcIsUh8J2ONaSgMu7gHT/3J6E1oL5nCs7L1ydQQ2
GcT/7RYwihR04uQP8SrbgBNUFVcF7tDejj/uHNhY+gAGKCsekHqrW7UgukH5l7Yr
et1bPi33eT7KoLJudlUUq4lnLndVLg8OzN+JEd8gRmjZNkYGAhV9fwIDAQABo4IB
ADCB/TAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIGwDATBgNVHSUEDDAKBggr
BgEFBQcDCTAdBgNVHQ4EFgQUxYZKIX7Z8rV9oQGsrF5d/hWC978wDwYJKwYBBQUH
MAEFBAIFADBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmdvZGFkZHkuY29t
L3JlcG9zaXRvcnkvbWFzdGVyZ29kYWRkeTJpc3N1aW5nLmNybDBKBgNVHSAEQzBB
MD8GC2CGSAGG/W0BBxcBMDAwLgYIKwYBBQUHAgEWImh0dHA6Ly9jcmwuZ29kYWRk
eS5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACb/o/NytfJvWRn3
HBL23ae0+Y2r711BwSWYtbi5dyc0L5LRDhbXIiyyKglZP+s2xOGswOel3AIOkhMk
XKKno61qCDE3hH3Xvz73ZiusB1S+9G3+2yDo1zVp4q1wmOMO29dEIbCJD0DPZBpp
+bnYKHt03AZgBQ2TaZlETWzp9nQCUNzqQIQEDu58dljvVBs7vDYVOkC7VCdm9VlX
JoNVQHeuggtMdpp+7Ur1QbhPODIrTJB4GtljDX2DnXcO60I+d8AZQRLMJ/iBRsOk
N/Bveu6phtmXaGnRhA79iqt0NDp4SUAs6XAbLCta9hlvL22CC0VQWJk7ZwCm6qqo
yMnygo8=
-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=121650, public, no-transform, must-revalidate]
Content-Length: [1799]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Tue, 27 Jun 2017 00:07:48 GMT]
Etag: ["06b7ec004a7b3dce80ad6a3068a6b97b29c04740"]
Expires: [Wed, 28 Jun 2017 11:42:01 GMT]
Last-Modified: [Mon, 26 Jun 2017 23:42:01 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Revoked

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1799 bytes (DER data)
Response time: 408.53102ms
Signature algorithm: SHA1WithRSA
Signature type: CA Delegated
Signed by: Go Daddy Validation Authority - G2
Issued by: Go Daddy Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Revoked

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h47m24s

Server and network information

Server Software: Apache

URL used for GET request

http://ocsp.godaddy.com/MEgwRjBEMEIwQDAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CBytz%2FB2hcrA%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEgwRjBEMEIwQDAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9
J47MNIMwojPX+2yz8LQsgM4CBytz/B2hcrA=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=121644, public, no-transform, must-revalidate]
Content-Length: [1799]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Tue, 27 Jun 2017 00:07:54 GMT]
Etag: ["06b7ec004a7b3dce80ad6a3068a6b97b29c04740"]
Expires: [Wed, 28 Jun 2017 11:42:01 GMT]
Last-Modified: [Mon, 26 Jun 2017 23:42:01 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Go Daddy Secure Certificate Authority - G2 (CA Certificate)

Certificate details for Go Daddy Secure Certificate Authority - G2 (At position 1 in certificate chain)
Serial number:
hex: 7
int: 7
Issued by: Go Daddy Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdroot-g2.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdroot-g2.crl
Size: 462 bytes (DER data)
Response time: 897.314107ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 0

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [462]
Content-Type: [application/pkix-crl]
Date: [Tue, 27 Jun 2017 00:09:17 GMT]
Etag: ["1ce-54ebba2754ac0"]
Expires: [Fri, 30 Jun 2017 00:09:17 GMT]
Last-Modified: [Fri, 05 May 2017 00:04:35 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1730 bytes (DER data)
Response time: 897.695134ms
Signature algorithm: SHA1WithRSA
Signature type: CA Delegated
Signed by: Go Daddy Root Validation Authority - G2
Issued by: Go Daddy Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h9m20s

Server and network information

Server Software: Apache

URL used for GET request

http://ocsp.godaddy.com/MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqF
BxBnKLbv9r0FQW4gwZTaD94CAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=119360, public, no-transform, must-revalidate]
Content-Length: [1730]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Tue, 27 Jun 2017 00:07:11 GMT]
Etag: ["12266719f636e87665f3c7bf50bdfdfbeb314b4b"]
Expires: [Wed, 28 Jun 2017 11:01:14 GMT]
Last-Modified: [Mon, 26 Jun 2017 23:01:14 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1730 bytes (DER data)
Response time: 894.362842ms
Signature algorithm: SHA1WithRSA
Signature type: CA Delegated
Signed by: Go Daddy Root Validation Authority - G2
Issued by: Go Daddy Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 33h9m15s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqF
BxBnKLbv9r0FQW4gwZTaD94CAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=119355, public, no-transform, must-revalidate]
Content-Length: [1730]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Tue, 27 Jun 2017 00:07:17 GMT]
Etag: ["12266719f636e87665f3c7bf50bdfdfbeb314b4b"]
Expires: [Wed, 28 Jun 2017 11:01:14 GMT]
Last-Modified: [Mon, 26 Jun 2017 23:01:14 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Go Daddy Root Certificate Authority - G2 (CA Certificate)

Certificate details for Go Daddy Root Certificate Authority - G2 (At position 2 in certificate chain)
Serial number:
hex: 0
int: 0
Issued by: Go Daddy Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: GoDaddy.com, Inc.
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This is a self signed certificate

Check the revocation status for another website

Created by Paul van Brouwershaven
© 2015 - 2017 Digitorus B.V.
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.