CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = Let's Encrypt, CN = R3 Produced At: May 9 01:42:00 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4 Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6 Serial Number: 04C2C1DD5206EA7A701BA2AB1519705F4FE5 Cert Status: good This Update: May 9 01:42:00 2024 GMT Next Update: May 16 01:41:58 2024 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 51:28:02:48:73:48:06:df:22:7c:cc:fe:dd:41:e7:4a:cc:95: 68:ff:ea:d8:c1:f2:f2:ab:88:3f:1c:66:77:60:92:3c:81:c0: 2f:f0:41:66:89:e6:79:ab:f0:4e:65:a7:d6:24:2e:64:aa:50: 50:72:db:23:15:8b:23:ec:4b:81:2b:2a:d5:bc:e3:eb:51:b4: ec:72:d2:79:6c:2f:83:a3:4f:65:39:9c:19:e2:8c:0f:70:dc: 49:b3:2f:9f:57:76:fb:dd:dd:77:44:2c:f1:0d:60:6c:b8:f5: 14:92:01:a0:45:4c:1a:68:e7:07:9c:8a:c6:65:0b:38:28:3c: 67:da:2c:dc:3b:a4:18:6a:68:a5:a7:70:5e:05:5a:6d:34:52: 84:12:93:18:d3:c7:04:d8:6c:4a:2a:d8:19:a4:4b:de:27:93: 9a:63:8d:02:68:76:b6:3c:6a:07:41:6e:c9:e8:81:62:f8:a3: ff:4a:c5:44:f0:cb:0b:01:57:e1:70:58:f1:ed:6c:14:3f:45: a3:1f:34:86:03:f1:02:c4:84:d6:77:ed:12:91:6b:f9:0a:70: d9:6a:ee:1c:79:e1:d4:31:86:04:4a:e2:3f:70:c5:d8:cd:32: 46:af:10:c7:fe:68:ce:82:91:a7:a7:90:76:c4:4d:c5:1a:9b: 02:3b:9b:7f ====================================== --- Certificate chain 0 s:CN = extremis.jp i:C = US, O = Let's Encrypt, CN = R3 a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256 v:NotBefore: May 5 12:41:16 2024 GMT; NotAfter: Aug 3 12:41:15 2024 GMT 1 s:C = US, O = Let's Encrypt, CN = R3 i:C = US, O = Internet Security Research Group, CN = ISRG Root X1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIEFzCCAv+gAwIBAgISBMLB3VIG6npwG6KrFRlwX0/lMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDUxMjQxMTZaFw0yNDA4MDMxMjQxMTVaMBYxFDASBgNVBAMT C2V4dHJlbWlzLmpwMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnlJONRYqtaiL IcBf2/lV+haFK9K8wZM1yJXvSSj+NFPRflOw+H3CBIMx4PzjL6OpNOO/Bh0SREab 7YEqI+SnrKOCAgwwggIIMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUNxa4KONXIopk M6D1k3Qaz5nUlmMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYI KwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcw IgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYIL ZXh0cmVtaXMuanAwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdQA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY9I /MhjAAAEAwBGMEQCIF2klpmuunEggyWRx802Qh2kVjkEmmPlPRbWKVtv2RAzAiBe pv8RVzb9dTekCVj4yOWDD3Vg9tvq8Y7U/1vAi6Vf4wB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABj0j8yGQAAAQDAEcwRQIhAPVk5wslXhWwpUBI cbq9AR8hxHbynFHSvY8g5V2q2Lw2AiAIviE3vZh/FTSiI2Lr94tUKe5s1mHddY6c sERj+YkWujANBgkqhkiG9w0BAQsFAAOCAQEAkwHfYlEQ0pnvjc7mdWDlNOnT9mD+ CMIDzdCojMAK0MVtE05qlZNW71d/dn39Nz93u3CwRTOseutquRQ8HXVqA5a2u/za Dn/zY9c/bXvy9ZA4UNI7TxBFOU9rdcdl1nOmtJkuGubMn4TEHEBavF/A5UgOeuFg fsM12dHglgJuFN7FrRceT2h22jpvrFSbTU7BnE3hMUUiOp/q1KqhYVfz7YXcL3/k qoyXYctChVtrEuhqgMNGC8G5cbKIu/8KfKIh/9PXepy6Q3bDk1o3LvfYGXYVk4gX FLv90i4qkVIFC++bSyCSU4WDugfO+U0BrSfiwyFh5YypWxX7jjgDsNilMA== -----END CERTIFICATE----- subject=CN = extremis.jp issuer=C = US, O = Let's Encrypt, CN = R3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits --- SSL handshake has read 3229 bytes and written 386 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_128_GCM_SHA256 Session-ID: 98ED3C17555E591FD50B666F6348B9008E5A6F5A7357429F190DB81CE741224A Session-ID-ctx: Resumption PSK: F06881C77E2AA969CFB02929FA5DDF9A879493D93A7816A25D760BD01D080A46 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 604800 (seconds) TLS session ticket: 0000 - cf 68 5b 18 a5 b8 19 7f-f1 14 d9 92 9f 87 1a 23 .h[............# 0010 - 9d e3 e6 3b b0 d5 34 1d-3a 1f 5f 9b db af 24 2b ...;..4.:._...$+ 0020 - a2 78 50 da c3 08 f6 57-2c 8f 75 41 04 13 13 d7 .xP....W,.uA.... 0030 - 21 3c 89 80 b5 2e 9f 09-22 c6 57 23 97 5c 1a 28 !<......".W#.\.( 0040 - 98 20 80 0c a9 5c df 0a-ff f5 2b f6 eb df 9d c6 . ...\....+..... 0050 - df 15 11 e5 04 24 f4 b6-27 33 bc 7a 81 3d 58 17 .....$..'3.z.=X. 0060 - 1c 80 5a 6b f6 c8 11 3d-3b 85 1f 7d 1d 30 aa 1b ..Zk...=;..}.0.. 0070 - 78 x Start Time: 1715333374 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK