{{:security:screenshot.png?200|}} となる証明書

<code>
$ openssl ocsp -issuer start.com/sub.class1.server.ca.pem -cert ../servercert2015/kilkenny.harp.gr.jp.crt -url http://ocsp.startssl.com/sub/class1/server/ca -header Host ocsp.startssl.com -CApath start.com/ 
WARNING: no nonce in response
Response verify OK
../servercert2015/kilkenny.harp.gr.jp.crt: unknown
	This Update: Mar 19 07:31:50 2015 GMT
	Next Update: Mar 21 07:31:50 2015 GMT
</code>

ちゃんとアクセスできる証明書

<code>
$ openssl ocsp -issuer start.com/sub.class1.server.ca.pem -cert ../servercert2014/guinan.ten-forward.ws.crt -url http://ocsp.startssl.com/sub/class1/server/ca -header Host ocsp.startssl.com -CApath start.com/ 
WARNING: no nonce in response
Response verify OK
../servercert2014/guinan.ten-forward.ws.crt: good
	This Update: Mar 19 06:01:44 2015 GMT
	Next Update: Mar 21 06:01:44 2015 GMT
</code>

  - http://ya.maya.st/d/201404c.html
  - http://ggutter.blogspot.jp/2010/04/ocsp-rsigner.html
  - http://www9.atwiki.jp/kurushima/pages/31.html