# OCSP response of `guacamole.luckycirclemyhome.mydns.jp` from OCSP Stapling

CONNECTED(00000003)
OCSP response:
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = R3
    Produced At: Apr 25 11:38:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4
      Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6
      Serial Number: 03A76A07851D1ABC8313A9E0114936273D79
    Cert Status: good
    This Update: Apr 25 11:38:00 2024 GMT
    Next Update: May  2 11:37:58 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        94:85:6a:48:ca:6b:22:24:93:2c:18:f7:71:a1:d2:da:be:56:
        3a:67:82:9c:30:e7:64:cb:79:bf:e4:fa:25:dd:72:cd:4d:01:
        23:2d:8e:16:c0:17:06:82:ef:15:a1:4c:cc:09:6a:99:77:01:
        20:ec:f2:c1:93:d3:97:e8:7f:19:18:7a:f4:2e:8b:bb:91:71:
        41:67:cc:fc:76:27:8e:ca:88:ce:a6:e8:86:ec:27:fb:49:66:
        7e:38:d7:e9:a2:0d:54:85:4b:0d:84:29:0f:f4:87:f4:47:da:
        75:7c:a6:f7:8d:9d:65:08:4e:c4:26:46:c8:cf:3f:81:8d:5e:
        a6:56:21:d1:d3:79:c7:ac:4f:11:13:b6:3a:f3:54:f6:9b:13:
        b7:96:d7:97:3a:00:70:79:f8:06:63:21:78:71:2c:55:0b:d2:
        03:e1:4a:78:47:58:7a:e7:cf:81:93:a4:10:b3:15:57:8e:d6:
        c7:ce:0f:c1:2a:08:16:ca:30:08:9b:f2:17:1e:29:f5:c1:fc:
        5b:5b:e8:f2:b1:a1:56:4b:ce:31:e7:4e:ca:a8:37:05:13:53:
        5b:12:ea:cc:d7:f3:6d:ff:db:0b:78:e4:e0:db:99:38:81:f6:
        02:be:d0:5e:8f:cc:35:a1:40:5e:b2:34:91:a8:9b:f2:72:43:
        b4:db:57:92
======================================
---
Certificate chain
 0 s:CN = guacamole.luckycirclemyhome.mydns.jp
   i:C = US, O = Let's Encrypt, CN = R3
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256
   v:NotBefore: Apr 25 10:38:56 2024 GMT; NotAfter: Jul 24 10:38:55 2024 GMT
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
subject=CN = guacamole.luckycirclemyhome.mydns.jp
issuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3279 bytes and written 411 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_128_GCM_SHA256
    Session-ID: 1AC7C1D51CB46DACD2BAE1DCA3E8B47193D495F040CABDD1A28D64D33D331A46
    Session-ID-ctx:
    Resumption PSK: 443521B139CB6C15E3440223198B6F05DB448B10FBEA1B6AE3D085762FB1E1C1
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 604800 (seconds)
    TLS session ticket:
    0000 - f9 61 d6 8a 65 69 77 0d-82 5c 25 fe 51 10 0b 1c   .a..eiw..\%.Q...
    0010 - d7 ae 6b 0d 6f 60 da 39-40 e9 44 b4 03 a0 6f 39   ..k.o`.9@.D...o9
    0020 - 93 b7 68 bb 7e d7 1a 80-3c 34 83 0d d5 0c 6f 04   ..h.~...<4....o.
    0030 - 0f 40 86 d1 4e 5c bb 19-1b 78 b2 07 78 51 89 31   .@..N\...x..xQ.1
    0040 - 38 89 0d cd f0 d4 12 d5-26 4c 48 9a 5d 15 c1 4d   8.......&LH.]..M
    0050 - 60 d6 47 32 ff ab 69 64-71 32 78 56 fc 09 f0 3d   `.G2..idq2xV...=
    0060 - 73 c5 1f ef f0 b6 e3 4f-18 b2 6a 33 f2 cc fc 9b   s......O..j3....
    0070 - fc                                                .

    Start Time: 1714290283
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK

# OCSP response of `guacamole.luckycirclemyhome.mydns.jp` from OCSP responder (Let's Encrypt)

OCSP Request Data:
    Version: 1 (0x0)
    Requestor List:
        Certificate ID:
          Hash Algorithm: sha1
          Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4
          Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6
          Serial Number: 03A76A07851D1ABC8313A9E0114936273D79
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = R3
    Produced At: Apr 27 09:22:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4
      Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6
      Serial Number: 03A76A07851D1ABC8313A9E0114936273D79
    Cert Status: good
    This Update: Apr 27 09:22:00 2024 GMT
    Next Update: May  4 09:21:58 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        11:fd:61:93:f5:c7:3e:33:9d:ad:33:83:38:95:2d:7b:ca:26:
        9c:fb:2d:df:2d:d9:64:82:da:55:f4:78:11:5d:0a:e3:44:17:
        c1:ec:76:99:9d:4b:5c:71:95:0e:d9:3c:de:f6:4f:1a:e1:0e:
        5a:aa:39:f7:04:e1:5b:c3:8a:10:01:f3:77:57:b5:46:7a:59:
        07:4c:89:67:1c:c8:31:92:cd:05:36:df:c3:d6:86:fb:26:b5:
        4b:42:d4:b5:8c:1d:14:d7:af:f5:32:36:1f:a5:b8:a6:fc:42:
        8e:95:61:b9:04:a6:b3:a8:08:69:79:e4:5b:b2:61:f7:2f:86:
        cc:89:b4:6f:09:f8:43:7c:64:64:c5:91:6f:14:39:e3:95:de:
        0b:34:22:96:f0:60:24:92:a5:e9:0e:52:7c:b7:4c:85:bc:0e:
        17:e2:6f:76:1c:a7:fb:16:a3:4a:dd:67:18:b9:5f:e7:1d:99:
        15:d6:1a:2c:d5:6b:84:95:1f:c1:b9:3f:4e:44:48:c1:d5:49:
        7f:0a:59:de:bb:3b:f5:24:68:46:70:95:54:61:15:66:c3:c2:
        74:29:8b:a7:9d:9c:04:f4:29:11:d3:c3:fb:82:8d:c3:e2:53:
        ea:0f:70:70:a7:6e:16:b0:82:fc:25:09:ce:7f:91:a9:e2:5f:
        49:96:0c:b5
0x03a76a07851d1abc8313a9e0114936273d79: good
	This Update: Apr 27 09:22:00 2024 GMT
	Next Update: May  4 09:21:58 2024 GMT

Welcome to OCSP Checker.

# Check OCSP Stapling and OCSP (from Responder)

# Certificate of `guacamole.luckycirclemyhome.mydns.jp`

# OCSP response of `guacamole.luckycirclemyhome.mydns.jp` from OCSP Stapling

# OCSP response of `guacamole.luckycirclemyhome.mydns.jp` from OCSP responder (Let's Encrypt)

Welcome to OCSP Checker.

# Check OCSP Stapling and OCSP (from Responder)

# Certificate of guacamole.luckycirclemyhome.mydns.jp

# OCSP response of guacamole.luckycirclemyhome.mydns.jp from OCSP Stapling

# OCSP response of guacamole.luckycirclemyhome.mydns.jp from OCSP responder (Let's Encrypt)

# Certificate of `guacamole.luckycirclemyhome.mydns.jp`

# OCSP response of `guacamole.luckycirclemyhome.mydns.jp` from OCSP Stapling

# OCSP response of `guacamole.luckycirclemyhome.mydns.jp` from OCSP responder (Let's Encrypt)