daniel@stinkpad-02:~$ curl -k -L -I masto.rootdc.xyz HTTP/1.1 301 Moved Permanently Server: nginx/1.14.0 (Ubuntu) Date: Wed, 18 Sep 2019 22:08:18 GMT Content-Type: text/html Content-Length: 194 Connection: keep-alive Location: https://masto.rootdc.xyz/ HTTP/1.1 302 Found Date: Wed, 18 Sep 2019 22:08:18 GMT Content-Type: text/html; charset=utf-8 Connection: keep-alive Server: Mastodon X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Location: https://masto.rootdc.xyz/about Vary: Accept-Encoding Cache-Control: no-cache Content-Security-Policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://masto.rootdc.xyz; img-src 'self' https: data: blob: https://masto.rootdc.xyz; style-src 'self' 'unsafe-inline' https://masto.rootdc.xyz; media-src 'self' https: data: https://masto.rootdc.xyz; frame-src 'self' https:; manifest-src 'self' https://masto.rootdc.xyz; connect-src 'self' blob: https://masto.rootdc.xyz wss://masto.rootdc.xyz; script-src 'self' https://masto.rootdc.xyz Set-Cookie: _mastodon_session=5Tn6ix43ZaygZnsdWAShz2DwCFeCvfxd3zam5bgHdyb%2FJbpSRFnNG8d7IHqOPIKReUj%2B6UuLlJctGaizc7x4Od7CmeJXSw%3D%3D--wSCMAx%2BT%2BDCTP7jl--KFsxvFL1L5Do1Y%2BwLCrehQ%3D%3D; path=/; secure; HttpOnly X-Request-Id: cb3d659c-3478-4efe-9a76-2f13fdb46e0e X-Runtime: 0.004329 X-Cached: MISS Strict-Transport-Security: max-age=31536000 HTTP/1.1 200 OK Date: Wed, 18 Sep 2019 22:08:18 GMT Content-Type: text/html; charset=utf-8 Connection: keep-alive Vary: Accept-Encoding Server: Mastodon X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding ETag: W/"acb1ddf05957e0f97959befe0f70c399" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://masto.rootdc.xyz; img-src 'self' https: data: blob: https://masto.rootdc.xyz; style-src 'self' 'unsafe-inline' https://masto.rootdc.xyz; media-src 'self' https: data: https://masto.rootdc.xyz; frame-src 'self' https:; manifest-src 'self' https://masto.rootdc.xyz; connect-src 'self' blob: https://masto.rootdc.xyz wss://masto.rootdc.xyz; script-src 'self' https://masto.rootdc.xyz Set-Cookie: _mastodon_session=xkfxyNdPOd41VDOPZFRsIPeSUfCNEY7TMqw6OMtD9aQzGN2vT9cAaI7yoaQ2Uv8A5zCj36NKRXIq1IHFkdjPWkUIRuyYLeo0YVaTNVklkHhY9thQ6g2riKetL%2FQkSq7KgVy8GNUay0YyA7Qs3Bgt7nfuIp2JVqCnX88clicTOGhE5FHdTU2tAw%3D%3D--vs%2FnGr9K2xTgnDYs--azpp%2Bp5bE3uMnlykdhTRTA%3D%3D; path=/; secure; HttpOnly X-Request-Id: cc3da349-e2f5-462f-9e7c-81a54b65fbd2 X-Runtime: 0.037169 X-Cached: MISS Strict-Transport-Security: max-age=31536000 daniel@stinkpad-02:~$ openssl s_client -connect masto.rootdc.xyz:443 | openssl x509 -text -noout depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = masto.rootdc.xyz verify error:num=10:certificate has expired notAfter=Sep 18 18:51:55 2019 GMT verify return:1 depth=0 CN = masto.rootdc.xyz notAfter=Sep 18 18:51:55 2019 GMT verify return:1 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b9:f8:f8:cf:fa:90:9e:13:d0:3d:12:51:2f:b5:61:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3 Validity Not Before: Jun 20 18:51:55 2019 GMT Not After : Sep 18 18:51:55 2019 GMT Subject: CN=masto.rootdc.xyz Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b7:d8:8b:37:2d:7d:c2:a1:da:ae:b2:eb:44:51: 36:46:96:86:33:16:42:e4:c1:44:94:15:69:50:03: 22:58:70:07:dc:34:e2:1c:95:1d:31:94:a7:15:cc: 18:59:17:eb:76:3f:98:a0:5b:11:c8:82:5e:6f:88: 4a:44:2f:14:f9:84:46:2e:4f:eb:08:f9:e1:bd:5d: 2f:72:cb:9f:25:a6:1e:ff:4c:42:cd:f3:08:e0:87: 11:2e:8c:ab:51:2e:c0:0a:b9:99:34:b6:fc:26:e5: c7:cd:be:19:0e:34:bd:da:04:c5:6b:e1:ec:65:8c: 5f:ef:f6:fa:bb:02:3e:82:ff:1e:16:be:db:49:47: 72:dd:07:ab:da:6c:d1:e0:6f:c9:49:59:ca:e9:6d: f5:c0:3e:19:a5:ce:dc:b6:79:94:47:35:ef:ff:bb: 7d:8f:29:95:6e:3e:78:30:80:b2:69:ff:91:a0:18: 75:e4:75:9d:16:e9:dc:55:79:56:b9:0c:83:6a:8a: a1:f7:32:23:01:a3:62:b5:49:aa:a4:a9:c2:82:2e: 73:f0:8e:a2:f5:44:8e:dc:bb:28:5c:88:dc:cc:7b: 0f:e9:4a:7e:68:1b:07:ff:77:ad:f9:8e:de:40:58: 0b:11:14:a3:49:3d:c9:8a:3f:42:2c:4a:fa:c5:81: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 60:36:BE:51:E6:A5:5E:BF:E2:3D:DA:F0:74:31:D9:EE:76:74:D3:3F X509v3 Authority Key Identifier: keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1 Authority Information Access: OCSP - URI:http://ocsp.int-x3.letsencrypt.org CA Issuers - URI:http://cert.int-x3.letsencrypt.org/ X509v3 Subject Alternative Name: DNS:masto.rootdc.xyz X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.44947.1.1.1 CPS: http://cps.letsencrypt.org CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1(0) Log ID : 74:7E:DA:83:31:AD:33:10:91:21:9C:CE:25:4F:42:70: C2:BF:FD:5E:42:20:08:C6:37:35:79:E6:10:7B:CC:56 Timestamp : Jun 20 19:51:55.955 2019 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:22:05:E8:DB:EB:17:C6:97:FA:09:1C:19: F4:16:D6:DF:6C:C1:18:17:63:6A:B7:64:2E:FC:A0:37: 05:C4:71:D0:02:20:2E:67:79:DD:EA:8D:FE:56:23:95: 05:34:20:7D:1E:9D:C0:1D:C1:48:2B:66:97:7C:3C:06: 38:E3:57:E1:34:CF Signed Certificate Timestamp: Version : v1(0) Log ID : 63:F2:DB:CD:E8:3B:CC:2C:CF:0B:72:84:27:57:6B:33: A4:8D:61:77:8F:BD:75:A6:38:B1:C7:68:54:4B:D8:8D Timestamp : Jun 20 19:51:55.999 2019 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:96:37:CD:10:34:BF:F4:39:9A:C1:63: EB:56:7B:BD:A3:52:51:6C:C9:22:F9:FA:D8:A2:97:EF: 67:C9:F1:51:AF:02:21:00:A7:51:C4:AD:0E:B7:02:B9: B7:17:2A:65:73:9E:20:90:45:B5:23:8B:0D:9B:8A:C8: F8:45:1A:7A:C4:4C:7C:BF Signature Algorithm: sha256WithRSAEncryption 78:be:b1:cb:bb:62:8f:41:f7:d7:0e:46:c0:7c:02:40:52:94: b6:2c:29:c8:fe:82:67:82:7d:6a:67:17:0a:d2:77:28:02:1e: 9b:f8:82:a1:41:63:3c:34:aa:c2:11:cb:83:e6:d4:a7:0c:36: 23:a1:5b:e6:84:f2:80:4c:d6:84:a5:14:35:06:ba:27:1f:2e: 96:d9:40:41:e9:a1:11:3f:c6:10:c9:22:d5:6a:6a:90:b2:95: f3:a6:74:03:65:73:61:42:0f:87:7c:c4:a4:53:db:5e:b7:6e: 77:62:b9:2f:eb:1a:76:aa:fe:a0:3a:f9:e5:5f:2e:25:97:3e: ca:94:fc:95:67:05:c0:3e:5b:05:0f:0b:10:e6:2e:72:33:1f: ec:f7:8d:17:1c:87:6a:f3:c6:f0:7a:bb:3e:3b:9f:67:aa:76: 84:5e:da:3b:33:3b:36:68:72:9c:5d:e9:e9:17:e9:37:95:04: 55:08:52:69:43:7f:e0:35:ed:70:c2:25:34:35:a0:25:9d:9a: c3:a1:8b:1b:c7:9a:57:01:b2:63:e8:e9:a1:d9:96:a1:99:8e: f1:ef:65:61:af:93:b2:aa:93:e2:ae:20:7d:fc:51:0a:2e:48: 1f:81:b7:2c:ec:7b:71:17:ec:bc:f1:48:97:6e:d4:19:53:06: da:68:77:ee DONE