CRL & OCSP report for 0-jump.valueline.com.www.coolcat.org - coolcat.org (Springfield-Greene County Library District)

coolcat.org

Certificate details for coolcat.org (At position 0 in certificate chain)
Serial number:
hex: e96f27548ebdb1340000000054cd3082
int: 310287265682499153059341146372816318594
Issued by: Entrust Certification Authority - L1M
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Company registration number: 1971-01-01
Organization: Springfield-Greene County Library District
State / Province: Missouri
Locality: Springfield
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Check certificate compliance for 0-jump.valueline.com.www.coolcat.org.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.entrust.net/level1m.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.entrust.net/level1m.crl
Size: 129377 bytes (DER data)
Response time: 484.710899ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 2620

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Content Delivery Network (CDN): Akamai
Cache Information: TCP_HIT from a23-219-88-197.deploy.akamaitechnologies.com (AkamaiGHost/8.3.4.1.2-20081415) (-)

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [no-cache]
Content-Length: [129377]
Content-Type: [application/x-pkcs7-crl]
Date: [Sun, 25 Jun 2017 21:59:26 GMT]
Expires: [Sun, 25 Jun 2017 21:59:26 GMT]
Last-Modified: [Sun, 25 Jun 2017 21:00:01 GMT]
Pragma: [no-cache]
X-Cache: [TCP_HIT from a23-219-88-197.deploy.akamaitechnologies.com (AkamaiGHost/8.3.4.1.2-20081415) (-)]
X-Frame-Options: [DENY]
  • Content-Type in response is set 'application/x-pkcs7-crl' and should be replaced with 'application/pkix-crl' (RFC 5280, section 4.2.1.13)
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.entrust.net (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.entrust.net (POST)
Size: 1942 bytes (DER data)
Response time: 508.422829ms
Signature algorithm: SHA256WithRSA
Signature type: CA Delegated
Signed by: OCSP1
Issued by: Entrust Certification Authority - L1M
Signing certificate validity: 2014-12-09 - 2017-12-09
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 1h0m0s

Server and network information

Content Delivery Network (CDN): Akamai
Cache Information: TCP_MISS from a23-219-93-86.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (-)

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQnuEQcScL/kljKed+RzpzFYOq9kwQUw/fQ
tSowra8NkSFwOVTdvIlwxzoCEQDpbydUjr2xNAAAAABUzTCC
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [public, no-transform, must-revalidate, max-age=3600]
Content-Length: [1942]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 25 Jun 2017 17:59:30 GMT]
Etag: ["6906539799BC440CF7D4135C8CA5E45A0AFD3ED1"]
Expires: [Sun, 25 Jun 2017 18:59:30 GMT]
Last-Modified: [Sun, 25 Jun 2017 15:07:11 GMT]
X-Cache: [TCP_MISS from a23-219-93-86.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (-)]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.entrust.net (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.entrust.net (GET)
Size: 1942 bytes (DER data)
Response time: 834.654234ms
Signature algorithm: SHA256WithRSA
Signature type: CA Delegated
Signed by: OCSP1
Issued by: Entrust Certification Authority - L1M
Signing certificate validity: 2014-12-09 - 2017-12-09
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 44m45s

Server and network information

Content Delivery Network (CDN): Akamai
Cache Information: TCP_REFRESH_MISS from a23-219-93-102.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (S)

URL used for GET request

http://ocsp.entrust.net/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQnuEQcScL%2FkljKed%2BRzpzFYOq9kwQUw%2FfQtSowra8NkSFwOVTdvIlwxzoCEQDpbydUjr2xNAAAAABUzTCC

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQnuEQcScL/kljKed+RzpzFYOq9kwQUw/fQ
tSowra8NkSFwOVTdvIlwxzoCEQDpbydUjr2xNAAAAABUzTCC
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [public, no-transform, must-revalidate, max-age=2685]
Content-Length: [1942]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 25 Jun 2017 17:59:29 GMT]
Etag: ["6906539799BC440CF7D4135C8CA5E45A0AFD3ED1"]
Expires: [Sun, 25 Jun 2017 18:44:14 GMT]
Last-Modified: [Sun, 25 Jun 2017 15:07:11 GMT]
X-Cache: [TCP_REFRESH_MISS from a23-219-93-102.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (S)]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Entrust Certification Authority - L1M (CA Certificate)

Certificate details for Entrust Certification Authority - L1M (At position 1 in certificate chain)
Serial number:
hex: 61a1e7d20000000051d366a6
int: 30215777750102225331854468774
Issued by: Entrust Root Certification Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.entrust.net/g2ca.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.entrust.net/g2ca.crl
Size: 1224 bytes (DER data)
Response time: 302.043055ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 14

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Content Delivery Network (CDN): Akamai
Cache Information: TCP_MEM_HIT from a72-246-64-21.deploy.akamaitechnologies.com (AkamaiGHost/8.3.4.3-20191559) (-)

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [no-cache]
Content-Length: [1224]
Content-Type: [application/x-pkcs7-crl]
Date: [Sun, 25 Jun 2017 22:35:15 GMT]
Expires: [Sun, 25 Jun 2017 22:35:15 GMT]
Last-Modified: [Thu, 05 Jan 2017 20:27:50 GMT]
Pragma: [no-cache]
X-Cache: [TCP_MEM_HIT from a72-246-64-21.deploy.akamaitechnologies.com (AkamaiGHost/8.3.4.3-20191559) (-)]
X-Frame-Options: [DENY]
  • Content-Type in response is set 'application/x-pkcs7-crl' and should be replaced with 'application/pkix-crl' (RFC 5280, section 4.2.1.13)
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.entrust.net (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.entrust.net (GET)
Size: 1991 bytes (DER data)
Response time: 854.627615ms
Signature algorithm: SHA1WithRSA
Signature type: CA Delegated
Signed by: Entrust Validation Authority
Issued by: Entrust Root Certification Authority - G2
Signing certificate validity: 2017-06-01 - 2019-06-01
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 5m2s

Server and network information

Content Delivery Network (CDN): Akamai
Cache Information: TCP_MEM_HIT from a23-215-131-63.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (A)

URL used for GET request

http://ocsp.entrust.net/ME0wSzBJMEcwRTAJBgUrDgMCGgUABBTLXNCzDvBhHecWjg70iJhBW0InywQUanImetAe733nO2lR1GyNn5ASZqsCDGGh59IAAAAAUdNmpg%3D%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
ME0wSzBJMEcwRTAJBgUrDgMCGgUABBTLXNCzDvBhHecWjg70iJhBW0InywQUanIm
etAe733nO2lR1GyNn5ASZqsCDGGh59IAAAAAUdNmpg==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [public, no-transform, must-revalidate, max-age=302]
Content-Length: [1991]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 25 Jun 2017 19:27:36 GMT]
Etag: ["51E6A30876DC9113A756F237ED7E18CDB33B5265"]
Expires: [Sun, 25 Jun 2017 19:32:38 GMT]
Last-Modified: [Sun, 25 Jun 2017 18:02:29 GMT]
X-Cache: [TCP_MEM_HIT from a23-215-131-63.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (A)]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.entrust.net (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.entrust.net (POST)
Size: 1991 bytes (DER data)
Response time: 864.560647ms
Signature algorithm: SHA1WithRSA
Signature type: CA Delegated
Signed by: Entrust Validation Authority
Issued by: Entrust Root Certification Authority - G2
Signing certificate validity: 2017-06-01 - 2019-06-01
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 5m59s

Server and network information

Content Delivery Network (CDN): Akamai
Cache Information: TCP_MEM_HIT from a23-215-131-87.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (A)

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
ME0wSzBJMEcwRTAJBgUrDgMCGgUABBTLXNCzDvBhHecWjg70iJhBW0InywQUanIm
etAe733nO2lR1GyNn5ASZqsCDGGh59IAAAAAUdNmpg==
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [public, no-transform, must-revalidate, max-age=359]
Content-Length: [1991]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 25 Jun 2017 19:27:36 GMT]
Etag: ["51E6A30876DC9113A756F237ED7E18CDB33B5265"]
Expires: [Sun, 25 Jun 2017 19:33:35 GMT]
Last-Modified: [Sun, 25 Jun 2017 18:02:29 GMT]
X-Cache: [TCP_MEM_HIT from a23-215-131-87.deploy.akamaitechnologies.com (AkamaiGHost/9.0.0-20100727) (A)]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Entrust Root Certification Authority - G2 (CA Certificate)

Certificate details for Entrust Root Certification Authority - G2 (At position 2 in certificate chain)
Serial number:
hex: 4a538c28
int: 1246989352
Issued by: Entrust Root Certification Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2009 Entrust, Inc. - for authorized use only
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This is a self signed certificate

Check the revocation status for another website

Created by Paul van Brouwershaven
© 2015 - 2017 Digitorus B.V.
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.