CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = Let's Encrypt, CN = R3 Produced At: May 2 13:55:00 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4 Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6 Serial Number: 04FB95E87C5D52763E7F36EDE8579126E777 Cert Status: good This Update: May 2 13:55:00 2024 GMT Next Update: May 9 13:54:58 2024 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 98:6d:69:60:6e:97:ab:16:ac:e4:26:1f:1c:c8:ca:06:65:41: cb:92:90:b1:d7:5e:e1:9c:c5:12:b2:2c:11:39:db:21:fc:c5: 82:84:60:75:df:44:7c:f1:32:cd:ed:eb:e7:af:ba:82:2e:67: 63:28:98:5d:34:d1:82:df:a3:cb:12:34:b7:13:fd:00:74:60: cf:54:22:e1:29:34:55:9e:b2:cf:95:78:d9:84:2c:3b:4d:51: bd:26:88:1f:b8:0c:e1:2a:e9:3c:2e:cf:80:c3:c4:cc:5a:fa: e2:b0:04:2d:c4:16:61:29:cd:52:83:0b:fa:42:24:af:36:b1: 98:9a:03:a7:72:aa:4a:09:ea:77:30:2b:70:31:11:67:9a:a8: 81:79:a9:9a:74:22:2a:11:51:23:86:89:90:08:68:48:44:00: e6:40:c7:30:eb:e4:4a:cd:00:fa:0b:2a:d0:2b:42:30:e0:95: 76:65:e5:dd:f4:76:fb:04:eb:17:64:a2:ae:9d:f9:40:9a:3a: 29:60:4e:68:88:32:be:1a:8f:46:66:a0:b8:64:0f:bf:12:bb: a5:bb:3c:31:35:0a:79:2e:e0:24:e9:51:1c:f3:7d:2b:b7:76: f6:ab:cb:8d:9c:72:2e:ae:54:69:d9:44:35:fc:a7:e8:8a:79: ca:9c:42:e0 ====================================== --- Certificate chain 0 s:CN = cavalor.jp i:C = US, O = Let's Encrypt, CN = R3 a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256 v:NotBefore: Mar 31 23:44:16 2024 GMT; NotAfter: Jun 29 23:44:15 2024 GMT 1 s:C = US, O = Let's Encrypt, CN = R3 i:C = US, O = Internet Security Research Group, CN = ISRG Root X1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIEFzCCAv+gAwIBAgISBPuV6HxdUnY+fzbt6FeRJud3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMzEyMzQ0MTZaFw0yNDA2MjkyMzQ0MTVaMBUxEzARBgNVBAMT CmNhdmFsb3IuanAwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARUDu6OQ+r3Ehco TLHBcaMylyj0B5AkrzhVl6xxloIBISXZ/5MmuJbyHUK9f2KpEpjLSRM0yyr5B3FF V/6YcwgDo4ICDTCCAgkwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRsdzSsV/C1xE3p AVMARMS0w7mXNDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggr BgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAi BggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAVBgNVHREEDjAMggpj YXZhbG9yLmpwMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGOlx0x gQAABAMARzBFAiA+3yqx5k83j+2bhPrzmo+CFDHLbO8ad4NgpGs0WlZsDwIhAOsk PUCeGqCpj/wf+Uj1VnY0iLU11QMQTQ0xIBeyfDNIAHcAouK/1h7eLy8HoNZObTen 3GVDsMa1LqLat4r4mm31F9gAAAGOlx0x5QAABAMASDBGAiEA1zSpMUhIAlCJqBMT SnNjqUe/EJcqG+uPL0iTTKqvuZECIQDjIGL0J2zlDJRCitgVKk8KaOziTeYs6xXT 1MJQyclP4DANBgkqhkiG9w0BAQsFAAOCAQEATZyk0C0i0o0ePaAbDn3dYnZril47 mv0IbmQqc1lfOR54fcBdVlZZLxF5VxkdF7l8wgAmKxTdhbjRrmZsyWQmYzOFnjMU Vsr4KZOXF7//HdbjbPiAz7ReaznlKgRbe22H1yXPewfaUYFl//341pkufk+JQxqj JIK8XZda+13RCia7YtB46Wwm2205hlosuh0RjAlpjCL1IgqK5GxWucE2+kRul8av AxGqJgIkjzmE2jiVP+quKv7YhSoaU3r3p9DKisWYocYxjAS3dgLRnXO7M+H/uQt2 fhtlpXTYmMf+osYalw+/osUiteO+encUdlT87bYqcvv7WLATHzdP7KW2EQ== -----END CERTIFICATE----- subject=CN = cavalor.jp issuer=C = US, O = Let's Encrypt, CN = R3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits --- SSL handshake has read 3228 bytes and written 385 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_128_GCM_SHA256 Session-ID: 563C26C4999AB35FFC10B1684C5EEE1FC92237731C9BE70004B7A03F327A730D Session-ID-ctx: Resumption PSK: 2E02E80F98F08905B3D9A9B4114FF1984DE8FE132B3305E5774FBC3529A63F2F PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 604800 (seconds) TLS session ticket: 0000 - 89 95 55 f4 13 c2 ee 4e-54 44 54 27 ed 64 73 39 ..U....NTDT'.ds9 0010 - b4 9c be e7 5e a9 72 81-2a ca 86 3c e3 85 ef 30 ....^.r.*..<...0 0020 - c4 22 64 be b1 4a c7 9d-09 e0 6b 78 13 ad bf c5 ."d..J....kx.... 0030 - c8 24 d9 d4 a5 9f 53 d8-aa 4c fe e2 ac f0 93 3a .$....S..L.....: 0040 - f2 59 58 d5 fe 9f 93 a3-82 d4 74 27 97 07 98 9a .YX.......t'.... 0050 - c2 52 62 54 61 64 e5 f7-ca 5b 5a dc 25 0a 22 9c .RbTad...[Z.%.". 0060 - 8d ee 46 c0 94 c4 7f 2b-2b aa ff 2e f7 6d d2 3d ..F....++....m.= 0070 - b8 . Start Time: 1714750664 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK