## New ocsp dcaro@seaborgium:~$ sudo openssl ocsp -issuer /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.chain.crt -cert /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.crt -text -url http://r3.o.lencr.org OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1 Serial Number: 0495779809842A31E50D10A2FE348383DE74 Request Extensions: OCSP Nonce: 0410156EAE16EF233BD5BC02252817FE2043 Responder Error: unauthorized (6) ## old ocsp dcaro@seaborgium:~$ sudo openssl ocsp -issuer /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.chain.crt -cert /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.crt -text -url http://ocsp.int-x3.letsencrypt.org OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1 Serial Number: 0495779809842A31E50D10A2FE348383DE74 Request Extensions: OCSP Nonce: 04105D4C2FA84AC51F1CAFA56D740040E649 OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 Produced At: Jan 3 14:01:00 2021 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1 Serial Number: 0495779809842A31E50D10A2FE348383DE74 Cert Status: good This Update: Jan 3 14:00:00 2021 GMT Next Update: Jan 10 14:00:00 2021 GMT Signature Algorithm: sha256WithRSAEncryption 87:24:76:b8:9f:da:1a:7a:d7:cc:dd:0a:ea:ff:77:e2:88:95: fc:52:68:12:bb:92:7e:32:6e:95:bf:fc:de:93:ab:e0:7c:9f: 5d:d5:75:b1:77:a6:d8:4d:8e:6b:ee:42:d8:3f:e9:8e:0c:e8: 4b:16:61:48:82:0c:e4:b3:1f:1a:1a:ba:46:2f:5f:a1:d7:41: 54:6c:b0:0d:4c:58:e9:78:b7:43:f1:4e:28:97:82:6d:cd:7c: cc:09:f0:81:49:20:44:94:7e:6a:dc:f0:43:32:c6:1b:e7:3a: c8:e8:83:86:ec:3e:04:d1:0c:1e:44:1e:0f:e8:94:e2:26:d9: ac:eb:dc:0a:64:4f:bb:fd:48:6e:1b:43:dd:eb:18:84:35:20: f0:d2:00:5d:11:85:1d:33:ae:d0:fb:95:a6:5f:64:9e:c1:de: 38:12:e5:da:d2:5e:f1:04:4a:96:a6:f9:08:3c:69:10:3b:1d: f8:9a:83:c0:45:33:d7:11:40:7a:30:f6:5c:e5:b6:18:04:6d: 17:bb:d4:96:23:2d:1b:15:68:40:51:2a:23:c6:c5:ed:00:ae: 60:cb:50:8e:83:d5:8a:46:76:4e:87:10:c7:93:f1:f0:ca:7f: 51:55:42:d7:48:56:7e:d7:d7:81:35:fa:4d:bb:be:35:b1:55: 1e:c9:73:4a WARNING: no nonce in response Response verify OK /etc/acmecerts/ldap/cae12c858fa6417d8d999bfaef1c25ec/rsa-2048.crt: good This Update: Jan 3 14:00:00 2021 GMT Next Update: Jan 10 14:00:00 2021 GMT