CRL & OCSP report for *.nido.cl (FUND EDUCACIONAL NIDO AGUILAS)

*.nido.cl

Certificate details for *.nido.cl (At position 0 in certificate chain)
Serial number:
hex: ef4977335cbcd08e1b7880c4ee39f5d
int: 19879184146209246415528196638293335901
Issued by: DigiCert Secure Server CA
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: FUND EDUCACIONAL NIDO AGUILAS
State / Province: Region Metropolitana
Locality: Santiago
Country: CL
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Check certificate compliance for *.nido.cl.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl3.digicert.com/ssca-g7.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl3.digicert.com/ssca-g7.crl
Size: 549 bytes (DER data)
Response time: 5.052751ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 1

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: ECS (lga/137F)
Cache Information: HIT

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=172800]
Content-Length: [549]
Content-Type: [application/x-pkcs7-crl]
Date: [Sat, 29 Apr 2017 21:16:15 GMT]
Etag: ["3031480901"]
Expires: [Mon, 01 May 2017 21:16:15 GMT]
Last-Modified: [Thu, 27 Apr 2017 17:15:13 GMT]
Server: [ECS (lga/137F)]
X-Cache: [HIT]
  • Content-Type in response is set 'application/x-pkcs7-crl' and should be replaced with 'application/pkix-crl' (RFC 5280, section 4.2.1.13)
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)
This CRL was cached at
http://crl4.digicert.com/ssca-g7.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl4.digicert.com/ssca-g7.crl
Size: 549 bytes (DER data)
Response time: 9.338041ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 1

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: CFS 0215

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=172800]
Cf4age: [75]
Cf4ttl: [31536000.000]
Content-Length: [549]
Content-Type: [application/x-pkcs7-crl]
Date: [Sat, 29 Apr 2017 21:16:14 GMT]
Expires: [Mon, 01 May 2017 21:16:14 GMT]
Last-Modified: [Sat, 29 Apr 2017 17:15:13 GMT]
Server: [CFS 0215]
X-Cf1: [13483:fD.ewr1:cf:cacheA.ewr1-01:H]
X-Cf2: [H]
X-Cf3: [H]
X-Cff: [M]
X-Cfhash: ["aeae5520dd66f8d1a556044dca9964ff"]
  • Content-Type in response is set 'application/x-pkcs7-crl' and should be replaced with 'application/pkix-crl' (RFC 5280, section 4.2.1.13)
  • This CRL file is DER encoded
  • Issuer field is byte-for-byte equivalent with issuers subject
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.digicert.com (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.digicert.com (GET)
Size: 471 bytes (DER data)
Response time: 27.095684ms
Signature algorithm: SHA1WithRSA
Signature type: CA Signed
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 48h0m0s

Server and network information

Server Software: nginx

URL used for GET request

http:/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN%2BtzyO%2Fc1R4StjS6K1qgppICEA70l3M1y80I4beIDE7jn10%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHb
N+tzyO/c1R4StjS6K1qgppICEA70l3M1y80I4beIDE7jn10=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBSQcds363PI
79zVHhK2NLorWqCmkhgPMjAxNjA4MzEwOTM5MDBaMHMwcTBJMAkGBSsOAwIaBQAE
FCCmlIsBvuglpDpFVXZmH1XBkgYzBBSQcds363PI79zVHhK2NLorWqCmkgIQDvSX
czXLzQjht4gMTuOfXYAAGA8yMDE2MDgzMTA5MzkwMFqgERgPMjAxNjA5MDcwODU0
MDBaMA0GCSqGSIb3DQEBBQUAA4IBAQB/eHe4AyYwR6lpsIjOIq4QVpQrlih6zdOk
lbfdf0ZRNxdMzqJeCJQN+FqC7LJDj6QcqMQRfftHCUTibnknHZblCKEE8zSfF5ic
vQwfvZ49s6uyFo0uOURIqKvx5pJTYCFkgv6NZnO1c5rT+hqLpSLGIfmy4zTs6AAc
9wRyTP9mIzNZsNgd3Ljm6yQmysm3s1YVAY34uQsVeoptdbeWxmMIZWV02A5dryep
0srXabe/bgs5/KK4pOzS0JekC0d9cy5aDr/+X18Nus9jpg78rH49LRqYfjBI6XJ5
tndc+Z9zA7WYhc9Wa7QjdVvDQfv8ogmY33lVzRaC3SY4xfEIP7G7
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)


Raw OCSP response headers

Accept-Ranges: [bytes]
Cache-Control: [public, max-age=172800]
Content-Length: [471]
Content-Type: [application/ocsp-response]
Date: [Sat, 29 Apr 2017 21:16:15 GMT]
Etag: ["57c6ad57-1d7"]
Expires: [Sat, 06 May 2017 09:16:15 GMT]
Last-Modified: [Wed, 31 Aug 2016 10:11:35 GMT]
Server: [nginx]
  • OCSP requests is smaller than 255 bytes
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response must be available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response expired 5628h22m15s ago
  • ThisUpdate is more than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is 5784h22m15s before the date in the Expires cache header
  • The Cache-Control max-age header outlives NextUpdate with 5676h22m15s
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.digicert.com (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.digicert.com (POST)
Size: 471 bytes (DER data)
Response time: 29.191829ms
Signature algorithm: SHA1WithRSA
Signature type: CA Signed
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 48h0m0s

Server and network information

Server Software: nginx

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHb
N+tzyO/c1R4StjS6K1qgppICEA70l3M1y80I4beIDE7jn10=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)


Raw OCSP response headers

Accept-Ranges: [bytes]
Cache-Control: [public, max-age=172800]
Content-Length: [471]
Content-Type: [application/ocsp-response]
Date: [Sat, 29 Apr 2017 21:16:15 GMT]
Etag: ["57c6ad57-1d7"]
Expires: [Sat, 06 May 2017 09:16:15 GMT]
Last-Modified: [Wed, 31 Aug 2016 10:11:35 GMT]
Server: [nginx]
  • OCSP response is valid for at least 8 hours (Microsoft)
  • OCSP response must be available at least 8 hours before the current period expires or at ½ the validity if valid for more than 16 hours (Microsoft)
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response expired 5628h22m15s ago
  • ThisUpdate is more than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is 5784h22m15s before the date in the Expires cache header
  • The Cache-Control max-age header outlives NextUpdate with 5676h22m15s
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

DigiCert Secure Server CA (CA Certificate)

Certificate details for DigiCert Secure Server CA (At position 1 in certificate chain)
Serial number:
hex: 69e1db77fcf1dfba97af5e5c9a24037
int: 8796353606545229494490896265396764727
Issued by: DigiCert Global Root CA
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: DigiCert Inc
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This certificate contains no information about authoritative CRL(s) or OCSP servers

Check the revocation status for another website

Created by Paul van Brouwershaven
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.