daniel@stinkpad-02:~$ curl -k -L -I masto.rootdc.xyz
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.0 (Ubuntu)
Date: Wed, 18 Sep 2019 22:08:18 GMT
Content-Type: text/html
Content-Length: 194
Connection: keep-alive
Location: https://masto.rootdc.xyz/
HTTP/1.1 302 Found
Date: Wed, 18 Sep 2019 22:08:18 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Server: Mastodon
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Location: https://masto.rootdc.xyz/about
Vary: Accept-Encoding
Cache-Control: no-cache
Content-Security-Policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://masto.rootdc.xyz; img-src 'self' https: data: blob: https://masto.rootdc.xyz; style-src 'self' 'unsafe-inline' https://masto.rootdc.xyz; media-src 'self' https: data: https://masto.rootdc.xyz; frame-src 'self' https:; manifest-src 'self' https://masto.rootdc.xyz; connect-src 'self' blob: https://masto.rootdc.xyz wss://masto.rootdc.xyz; script-src 'self' https://masto.rootdc.xyz
Set-Cookie: _mastodon_session=5Tn6ix43ZaygZnsdWAShz2DwCFeCvfxd3zam5bgHdyb%2FJbpSRFnNG8d7IHqOPIKReUj%2B6UuLlJctGaizc7x4Od7CmeJXSw%3D%3D--wSCMAx%2BT%2BDCTP7jl--KFsxvFL1L5Do1Y%2BwLCrehQ%3D%3D; path=/; secure; HttpOnly
X-Request-Id: cb3d659c-3478-4efe-9a76-2f13fdb46e0e
X-Runtime: 0.004329
X-Cached: MISS
Strict-Transport-Security: max-age=31536000
HTTP/1.1 200 OK
Date: Wed, 18 Sep 2019 22:08:18 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Vary: Accept-Encoding
Server: Mastodon
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: Accept-Encoding
ETag: W/"acb1ddf05957e0f97959befe0f70c399"
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://masto.rootdc.xyz; img-src 'self' https: data: blob: https://masto.rootdc.xyz; style-src 'self' 'unsafe-inline' https://masto.rootdc.xyz; media-src 'self' https: data: https://masto.rootdc.xyz; frame-src 'self' https:; manifest-src 'self' https://masto.rootdc.xyz; connect-src 'self' blob: https://masto.rootdc.xyz wss://masto.rootdc.xyz; script-src 'self' https://masto.rootdc.xyz
Set-Cookie: _mastodon_session=xkfxyNdPOd41VDOPZFRsIPeSUfCNEY7TMqw6OMtD9aQzGN2vT9cAaI7yoaQ2Uv8A5zCj36NKRXIq1IHFkdjPWkUIRuyYLeo0YVaTNVklkHhY9thQ6g2riKetL%2FQkSq7KgVy8GNUay0YyA7Qs3Bgt7nfuIp2JVqCnX88clicTOGhE5FHdTU2tAw%3D%3D--vs%2FnGr9K2xTgnDYs--azpp%2Bp5bE3uMnlykdhTRTA%3D%3D; path=/; secure; HttpOnly
X-Request-Id: cc3da349-e2f5-462f-9e7c-81a54b65fbd2
X-Runtime: 0.037169
X-Cached: MISS
Strict-Transport-Security: max-age=31536000
daniel@stinkpad-02:~$ openssl s_client -connect masto.rootdc.xyz:443 | openssl x509 -text -noout
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = masto.rootdc.xyz
verify error:num=10:certificate has expired
notAfter=Sep 18 18:51:55 2019 GMT
verify return:1
depth=0 CN = masto.rootdc.xyz
notAfter=Sep 18 18:51:55 2019 GMT
verify return:1
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b9:f8:f8:cf:fa:90:9e:13:d0:3d:12:51:2f:b5:61:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
Validity
Not Before: Jun 20 18:51:55 2019 GMT
Not After : Sep 18 18:51:55 2019 GMT
Subject: CN=masto.rootdc.xyz
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b7:d8:8b:37:2d:7d:c2:a1:da:ae:b2:eb:44:51:
36:46:96:86:33:16:42:e4:c1:44:94:15:69:50:03:
22:58:70:07:dc:34:e2:1c:95:1d:31:94:a7:15:cc:
18:59:17:eb:76:3f:98:a0:5b:11:c8:82:5e:6f:88:
4a:44:2f:14:f9:84:46:2e:4f:eb:08:f9:e1:bd:5d:
2f:72:cb:9f:25:a6:1e:ff:4c:42:cd:f3:08:e0:87:
11:2e:8c:ab:51:2e:c0:0a:b9:99:34:b6:fc:26:e5:
c7:cd:be:19:0e:34:bd:da:04:c5:6b:e1:ec:65:8c:
5f:ef:f6:fa:bb:02:3e:82:ff:1e:16:be:db:49:47:
72:dd:07:ab:da:6c:d1:e0:6f:c9:49:59:ca:e9:6d:
f5:c0:3e:19:a5:ce:dc:b6:79:94:47:35:ef:ff:bb:
7d:8f:29:95:6e:3e:78:30:80:b2:69:ff:91:a0:18:
75:e4:75:9d:16:e9:dc:55:79:56:b9:0c:83:6a:8a:
a1:f7:32:23:01:a3:62:b5:49:aa:a4:a9:c2:82:2e:
73:f0:8e:a2:f5:44:8e:dc:bb:28:5c:88:dc:cc:7b:
0f:e9:4a:7e:68:1b:07:ff:77:ad:f9:8e:de:40:58:
0b:11:14:a3:49:3d:c9:8a:3f:42:2c:4a:fa:c5:81:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
60:36:BE:51:E6:A5:5E:BF:E2:3D:DA:F0:74:31:D9:EE:76:74:D3:3F
X509v3 Authority Key Identifier:
keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
Authority Information Access:
OCSP - URI:http://ocsp.int-x3.letsencrypt.org
CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
X509v3 Subject Alternative Name:
DNS:masto.rootdc.xyz
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.44947.1.1.1
CPS: http://cps.letsencrypt.org
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1(0)
Log ID : 74:7E:DA:83:31:AD:33:10:91:21:9C:CE:25:4F:42:70:
C2:BF:FD:5E:42:20:08:C6:37:35:79:E6:10:7B:CC:56
Timestamp : Jun 20 19:51:55.955 2019 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:22:05:E8:DB:EB:17:C6:97:FA:09:1C:19:
F4:16:D6:DF:6C:C1:18:17:63:6A:B7:64:2E:FC:A0:37:
05:C4:71:D0:02:20:2E:67:79:DD:EA:8D:FE:56:23:95:
05:34:20:7D:1E:9D:C0:1D:C1:48:2B:66:97:7C:3C:06:
38:E3:57:E1:34:CF
Signed Certificate Timestamp:
Version : v1(0)
Log ID : 63:F2:DB:CD:E8:3B:CC:2C:CF:0B:72:84:27:57:6B:33:
A4:8D:61:77:8F:BD:75:A6:38:B1:C7:68:54:4B:D8:8D
Timestamp : Jun 20 19:51:55.999 2019 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:96:37:CD:10:34:BF:F4:39:9A:C1:63:
EB:56:7B:BD:A3:52:51:6C:C9:22:F9:FA:D8:A2:97:EF:
67:C9:F1:51:AF:02:21:00:A7:51:C4:AD:0E:B7:02:B9:
B7:17:2A:65:73:9E:20:90:45:B5:23:8B:0D:9B:8A:C8:
F8:45:1A:7A:C4:4C:7C:BF
Signature Algorithm: sha256WithRSAEncryption
78:be:b1:cb:bb:62:8f:41:f7:d7:0e:46:c0:7c:02:40:52:94:
b6:2c:29:c8:fe:82:67:82:7d:6a:67:17:0a:d2:77:28:02:1e:
9b:f8:82:a1:41:63:3c:34:aa:c2:11:cb:83:e6:d4:a7:0c:36:
23:a1:5b:e6:84:f2:80:4c:d6:84:a5:14:35:06:ba:27:1f:2e:
96:d9:40:41:e9:a1:11:3f:c6:10:c9:22:d5:6a:6a:90:b2:95:
f3:a6:74:03:65:73:61:42:0f:87:7c:c4:a4:53:db:5e:b7:6e:
77:62:b9:2f:eb:1a:76:aa:fe:a0:3a:f9:e5:5f:2e:25:97:3e:
ca:94:fc:95:67:05:c0:3e:5b:05:0f:0b:10:e6:2e:72:33:1f:
ec:f7:8d:17:1c:87:6a:f3:c6:f0:7a:bb:3e:3b:9f:67:aa:76:
84:5e:da:3b:33:3b:36:68:72:9c:5d:e9:e9:17:e9:37:95:04:
55:08:52:69:43:7f:e0:35:ed:70:c2:25:34:35:a0:25:9d:9a:
c3:a1:8b:1b:c7:9a:57:01:b2:63:e8:e9:a1:d9:96:a1:99:8e:
f1:ef:65:61:af:93:b2:aa:93:e2:ae:20:7d:fc:51:0a:2e:48:
1f:81:b7:2c:ec:7b:71:17:ec:bc:f1:48:97:6e:d4:19:53:06:
da:68:77:ee
DONE
