CRL & OCSP report for *.ads-gdn.com

*.ads-gdn.com

Certificate details for *.ads-gdn.com (At position 0 in certificate chain)
Serial number:
hex: 2b5e8a2eba15e2
int: 12207371581003234
Issued by: Starfield Secure Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization unit: Domain Control Validated
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Check certificate compliance for *.ads-gdn.com.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.starfieldtech.com/sfig2s1-12.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.starfieldtech.com/sfig2s1-12.crl
Size: 298041 bytes (DER data)
Response time: 378.497038ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 7281

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [298041]
Content-Type: [application/pkix-crl]
Date: [Sun, 30 Apr 2017 12:57:04 GMT]
Etag: ["48c39-54e50d2e31180"]
Expires: [Wed, 03 May 2017 12:57:04 GMT]
Last-Modified: [Sat, 29 Apr 2017 16:38:46 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.starfieldtech.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (POST)
Size: 1845 bytes (DER data)
Response time: 349.776725ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Validation Authority - G2
Issued by: Starfield Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 30h29m15s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEgwRjBEMEIwQDAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM+uArAQUJUWB
aFAmOD07LSy+zWrZtj2zZmMCByteii66FeI=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIHMQoBAKCCByowggcmBgkrBgEFBQcwAQEEggcXMIIHEzCCAQuhgYswgYgxCzAJ
BgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxl
MSQwIgYDVQQKExtTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBMTEMxLDAqBgNVBAMT
I1N0YXJmaWVsZCBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyGA8yMDE3MDQzMDA5
MDMxM1owajBoMEAwCQYFKw4DAhoFAAQU9WarcFdDtSnGItIHc3BZBzPrgKwEFCVF
gWhQJjg9Oy0svs1q2bY9s2ZjAgcrXoouuhXigAAYDzIwMTcwNDMwMDkwMzEzWqAR
GA8yMDE3MDUwMTIxMDMxM1owDQYJKoZIhvcNAQEFBQADggEBAHwRUstrAWhmDIMQ
kssoR3wSnqDuTRdgK3n5t25avZjvQaf5djo8jRG290t3ClI+qEieKfdxZMJexgKb
hDS8dZTLL84Hjhz1F7dQgS676jMwYwZKTUxUU9MiO7gkwkSL8BvZs+Sr5J1qT7l/
hfNW7x7YpDhTmdNy4pAJ8cmKyUn1xSkzM57z5JtIc8WOcqHGh+paJKHN0thcRNuT
NWoD5P6kbV3+rGR3c6G7g3V9C5yb7I8+goSGS4NFO8zPudSlUjklv7IagDMJccw8
G6mAgGdL5kiisRqh2WERS9l3Q4hsGqWLsGDmyunXNlXHmGvwiOnnBuZPPMNPvuu0
iGPh+Q+gggTsMIIE6DCCBOQwggPMoAMCAQICCQDcn6yT+v/VfzANBgkqhkiG9w0B
AQsFADCBxjELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcT
ClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIElu
Yy4xMzAxBgNVBAsTKmh0dHA6Ly9jZXJ0cy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBv
c2l0b3J5LzE0MDIGA1UEAxMrU3RhcmZpZWxkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBB
dXRob3JpdHkgLSBHMjAeFw0xNjEyMTMwNzAwMDBaFw0xNzEyMTMwNzAwMDBaMIGI
MQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRz
ZGFsZTEkMCIGA1UEChMbU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgTExDMSwwKgYD
VQQDEyNTdGFyZmllbGQgVmFsaWRhdGlvbiBBdXRob3JpdHkgLSBHMjCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMSt+zDfQd/+EDESIH4xIOLzJkCgOFq
yWKYMsVjvYH7vCdlU0EAGu2AlzYiIjKbaGYLbQFtOf+ohaiLl6ewX04FImdW6c97
5Uoie+XnMGYOVySnWHIXv/q6fFX7Rgwh50vOMCDuKHCCpx3MrYU5g0kP3J+Psv9j
E2Nc0jkOeHQadrpVTo8HGCWoz7XCLFIfCdjjWkoDLu4B0/9yehNaC+ZwrOy9cnUE
NhnE/+0WMIoUdOLkD/Eq24ATVBVXBe7Q3o4/7hzYWPoABigrHpB6q1u1ILpB+Ze2
K3rdWz4t93k+yqCybnZVFKuJZy53VS4PDszfiRHfIEZo2TZGBgIVfX8CAwEAAaOC
AQ8wggELMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgbAMBMGA1UdJQQMMAoG
CCsGAQUFBwMJMB0GA1UdDgQWBBTFhkohftnytX2hAaysXl3+FYL3vzAPBgkrBgEF
BQcwAQUEAgUAMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuc3RhcmZpZWxk
dGVjaC5jb20vcmVwb3NpdG9yeS9tYXN0ZXJzdGFyZmllbGQyaXNzdWluZy5jcmww
UAYDVR0gBEkwRzBFBgtghkgBhv1uAQcXATA2MDQGCCsGAQUFBwIBFihodHRwOi8v
Y3JsLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUA
A4IBAQCkDpMXweWPf6gA17Qn5MC1TGnJBn3KRfX5Rp5I91QBTpaymFk6hINZWQOC
1K1X4P0KQeP/QZ/VMEQ7OA70QPS/aO1Iq+m5tSnCgb5Ibrsv7EpOJwmwKK8+9AOo
EGV8hH3p4QW8jTZmEI78QYxhRvi6hk6LddU+kD0hdkr8f70E1LNQlJq3ZgdC4lLm
/gCcNnvKKa4QFcpqeBYi4O2SFGhJzX2sgiJZbAGRx3DcMMcI5Lu520ex0zR5vK33
FOgdwGEQlz/TqIZg0ENQnEtd8IUiwds9Do/fgk48vbp+hox6ZOya5oHKMHRuK1Py
omU89mZh8+Diar9He85JxOPYSlN6
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIJANyfrJP6/9V/MA0GCSqGSIb3DQEBCwUAMIHGMQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEl
MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEzMDEGA1UECxMq
aHR0cDovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMTQwMgYD
VQQDEytTdGFyZmllbGQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcy
MB4XDTE2MTIxMzA3MDAwMFoXDTE3MTIxMzA3MDAwMFowgYgxCzAJBgNVBAYTAlVT
MRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSQwIgYDVQQK
ExtTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBMTEMxLDAqBgNVBAMTI1N0YXJmaWVs
ZCBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwxK37MN9B3/4QMRIgfjEg4vMmQKA4WrJYpgyxWO9gfu8J2VT
QQAa7YCXNiIiMptoZgttAW05/6iFqIuXp7BfTgUiZ1bpz3vlSiJ75ecwZg5XJKdY
che/+rp8VftGDCHnS84wIO4ocIKnHcythTmDSQ/cn4+y/2MTY1zSOQ54dBp2ulVO
jwcYJajPtcIsUh8J2ONaSgMu7gHT/3J6E1oL5nCs7L1ydQQ2GcT/7RYwihR04uQP
8SrbgBNUFVcF7tDejj/uHNhY+gAGKCsekHqrW7UgukH5l7Yret1bPi33eT7KoLJu
dlUUq4lnLndVLg8OzN+JEd8gRmjZNkYGAhV9fwIDAQABo4IBDzCCAQswDAYDVR0T
AQH/BAIwADAOBgNVHQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwkwHQYD
VR0OBBYEFMWGSiF+2fK1faEBrKxeXf4Vgve/MA8GCSsGAQUFBzABBQQCBQAwVAYD
VR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zdGFyZmllbGR0ZWNoLmNvbS9yZXBv
c2l0b3J5L21hc3RlcnN0YXJmaWVsZDJpc3N1aW5nLmNybDBQBgNVHSAESTBHMEUG
C2CGSAGG/W4BBxcBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly9jcmwuc3RhcmZpZWxk
dGVjaC5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAKQOkxfB5Y9/
qADXtCfkwLVMackGfcpF9flGnkj3VAFOlrKYWTqEg1lZA4LUrVfg/QpB4/9Bn9Uw
RDs4DvRA9L9o7Uir6bm1KcKBvkhuuy/sSk4nCbAorz70A6gQZXyEfenhBbyNNmYQ
jvxBjGFG+LqGTot11T6QPSF2Svx/vQTUs1CUmrdmB0LiUub+AJw2e8oprhAVymp4
FiLg7ZIUaEnNfayCIllsAZHHcNwwxwjku7nbR7HTNHm8rfcU6B3AYRCXP9OohmDQ
Q1CcS13whSLB2z0Oj9+CTjy9un6GjHpk7JrmgcowdG4rU/KiZTz2ZmHz4OJqv0d7
zknE49hKU3o=
-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=109755, public, no-transform, must-revalidate]
Content-Length: [1845]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 30 Apr 2017 12:57:41 GMT]
Etag: ["96f69faa02614e527a1fe8bef4a6f61530c4080e"]
Expires: [Mon, 01 May 2017 21:03:13 GMT]
Last-Modified: [Sun, 30 Apr 2017 09:03:13 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.starfieldtech.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (GET)
Size: 1845 bytes (DER data)
Response time: 422.144423ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Validation Authority - G2
Issued by: Starfield Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 30h29m38s

Server and network information

Server Software: Apache

URL used for GET request

http:/MEgwRjBEMEIwQDAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM%2BuArAQUJUWBaFAmOD07LSy%2BzWrZtj2zZmMCByteii66FeI%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEgwRjBEMEIwQDAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM+uArAQUJUWB
aFAmOD07LSy+zWrZtj2zZmMCByteii66FeI=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=109778, public, no-transform, must-revalidate]
Content-Length: [1845]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 30 Apr 2017 12:57:17 GMT]
Etag: ["96f69faa02614e527a1fe8bef4a6f61530c4080e"]
Expires: [Mon, 01 May 2017 21:03:13 GMT]
Last-Modified: [Sun, 30 Apr 2017 09:03:13 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response is available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Starfield Secure Certificate Authority - G2 (CA Certificate)

Certificate details for Starfield Secure Certificate Authority - G2 (At position 1 in certificate chain)
Serial number:
hex: 7
int: 7
Issued by: Starfield Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.starfieldtech.com/sfroot-g2.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.starfieldtech.com/sfroot-g2.crl
Size: 474 bytes (DER data)
Response time: 351.045629ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 0

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [474]
Content-Type: [application/pkix-crl]
Date: [Sun, 30 Apr 2017 12:56:02 GMT]
Etag: ["1da-543a28e8e32c0"]
Expires: [Wed, 03 May 2017 12:56:02 GMT]
Last-Modified: [Wed, 14 Dec 2016 18:32:19 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.starfieldtech.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (GET)
Size: 1781 bytes (DER data)
Response time: 336.663868ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Root Validation Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 29h35m45s

Server and network information

Server Software: Apache

URL used for GET request

http:/MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6%2FsVZNPaFToNfxx8ZwqAQUfAwyH6fZMH%2FEfWijYqihzqsHWycCAQc%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6/sVZNPaFToNfxx8ZwqAQUfAwy
H6fZMH/EfWijYqihzqsHWycCAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=106545, public, no-transform, must-revalidate]
Content-Length: [1781]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 30 Apr 2017 12:57:13 GMT]
Etag: ["f7f8f52648e67cf4b8941f3f837e6c65c1848fcc"]
Expires: [Mon, 01 May 2017 20:06:26 GMT]
Last-Modified: [Sun, 30 Apr 2017 08:06:26 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP requests is smaller than 255 bytes
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.starfieldtech.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.starfieldtech.com/ (POST)
Size: 1781 bytes (DER data)
Response time: 347.886277ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Starfield Root Validation Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 29h35m45s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6/sVZNPaFToNfxx8ZwqAQUfAwy
H6fZMH/EfWijYqihzqsHWycCAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIG8QoBAKCCBuowggbmBgkrBgEFBQcwAQEEggbXMIIG0zCCAQuhgZEwgY4xCzAJ
BgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxl
MSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTEwLwYDVQQD
EyhTdGFyZmllbGQgUm9vdCBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyGA8yMDE3
MDQzMDA4MDYyNlowZDBiMDowCQYFKw4DAhoFAAQUFMD4hGUOv7FWTT2hU6DX8cfG
cKgEFHwMMh+n2TB/xH1oo2Kooc6rB1snAgEHgAAYDzIwMTcwNDMwMDgwNjI2WqAR
GA8yMDE3MDUwMTIwMDYyNlowDQYJKoZIhvcNAQEFBQADggEBAJzx84zmP71nEP1w
mwD6gD1gDC/4o1Hy0eernQSkcfVPVSaE8aTmAzQOjF0Vlhrxb1SpcE4uubwtYbQq
lJKZt0zMcOAbX+6Wybs1kQGBAAZ+GjngWGWpmjuFc0tcs1Dlh7sPqRs95SjaWhE2
J/MtpZVrpSYPijP2VpgJ1T2pDUkkRKmuQ1dx++WcrjWLqNe0SyMwgwLlbiKR8Wua
JdGtEzdvr0g+D2Q+KymGHOKcUdI+RLAPYuQG0LJdCqb10p2/91t5W9B9NBkSn3Ql
krtWiaD5dca3FIpatJ8mzo1eU9F4dWPvxjV1J7q8bg0m51Cdt8uW1ccfYy8aelCV
fprwkeGgggSsMIIEqDCCBKQwggOMoAMCAQICCQDNKqFyTzXZZjANBgkqhkiG9w0B
AQsFADCBjzELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcT
ClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIElu
Yy4xMjAwBgNVBAMTKVN0YXJmaWVsZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0
eSAtIEcyMB4XDTE2MTIxMzA3MDAwMFoXDTE3MTIxMzA3MDAwMFowgY4xCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw
IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTEwLwYDVQQDEyhT
dGFyZmllbGQgUm9vdCBWYWxpZGF0aW9uIEF1dGhvcml0eSAtIEcyMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxK37MN9B3/4QMRIgfjEg4vMmQKA4WrJ
YpgyxWO9gfu8J2VTQQAa7YCXNiIiMptoZgttAW05/6iFqIuXp7BfTgUiZ1bpz3vl
SiJ75ecwZg5XJKdYche/+rp8VftGDCHnS84wIO4ocIKnHcythTmDSQ/cn4+y/2MT
Y1zSOQ54dBp2ulVOjwcYJajPtcIsUh8J2ONaSgMu7gHT/3J6E1oL5nCs7L1ydQQ2
GcT/7RYwihR04uQP8SrbgBNUFVcF7tDejj/uHNhY+gAGKCsekHqrW7UgukH5l7Yr
et1bPi33eT7KoLJudlUUq4lnLndVLg8OzN+JEd8gRmjZNkYGAhV9fwIDAQABo4IB
ADCB/TAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIGwDATBgNVHSUEDDAKBggr
BgEFBQcDCTAdBgNVHQ4EFgQUxYZKIX7Z8rV9oQGsrF5d/hWC978wDwYJKwYBBQUH
MAEFBAIFADBGBgNVHR8EPzA9MDugOaA3hjVodHRwOi8vY3JsLnN0YXJmaWVsZHRl
Y2guY29tL3JlcG9zaXRvcnkvc2Zyb290LWcyLmNybDBQBgNVHSAESTBHMEUGC2CG
SAGG/W4BBxcBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly9jcmwuc3RhcmZpZWxkdGVj
aC5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBALblQ8FGXaDBWFyl
4JaQaA3Zuwg2EGSEmPwOaTURv5j22huSEy6Zrl+PlGP8veb3L+VNzdGWu45VMaHu
6l5SmVq5Bfg3l3aOT4hs7v7NynsXcA240RrSxABRMK5JW10sEqrN/vEZ5oAlolv8
QBXIs6WOc03M0GqyYmX4BzB3Tr43jrWjBMWZaTPDLlR6UvTdknymljXvyzxr80GE
LavCUKETbtxH8cgn6ZNuXqVFxdllg2e4P0HhcHOGFIM7+wRIkk7eJZNspWiJK7Ff
vc9kvUvDrl2quYmnZC7gSvQOpdxsVJxXNP4JNjjKQ7S+KXs/8vVdez13HpUcdz4x
sE7zHaE=
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=106545, public, no-transform, must-revalidate]
Content-Length: [1781]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Sun, 30 Apr 2017 12:57:13 GMT]
Etag: ["f7f8f52648e67cf4b8941f3f837e6c65c1848fcc"]
Expires: [Mon, 01 May 2017 20:06:26 GMT]
Last-Modified: [Sun, 30 Apr 2017 08:06:26 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Starfield Root Certificate Authority - G2 (CA Certificate)

Certificate details for Starfield Root Certificate Authority - G2 (At position 2 in certificate chain)
Serial number:
hex: 0
int: 0
Issued by: Starfield Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: Starfield Technologies, Inc.
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This is a self signed certificate

Check the revocation status for another website

Created by Paul van Brouwershaven
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.