となる証明書
$ openssl ocsp -issuer start.com/sub.class1.server.ca.pem -cert ../servercert2015/kilkenny.harp.gr.jp.crt -url http://ocsp.startssl.com/sub/class1/server/ca -header Host ocsp.startssl.com -CApath start.com/ WARNING: no nonce in response Response verify OK ../servercert2015/kilkenny.harp.gr.jp.crt: unknown This Update: Mar 19 07:31:50 2015 GMT Next Update: Mar 21 07:31:50 2015 GMT
ちゃんとアクセスできる証明書
$ openssl ocsp -issuer start.com/sub.class1.server.ca.pem -cert ../servercert2014/guinan.ten-forward.ws.crt -url http://ocsp.startssl.com/sub/class1/server/ca -header Host ocsp.startssl.com -CApath start.com/ WARNING: no nonce in response Response verify OK ../servercert2014/guinan.ten-forward.ws.crt: good This Update: Mar 19 06:01:44 2015 GMT Next Update: Mar 21 06:01:44 2015 GMT