depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
verify return:1
depth=0 C = US, ST = District Of Columbia, L = Washington, O = Office of Personnel Management, CN = www.opm.gov
verify return:1
CONNECTED(00000003)
OCSP response:
======================================
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: 9058FFB09C75A8515477B1EDF2A34316389E6CC5
Produced At: Apr 24 16:36:48 2024 GMT
Responses:
Certificate ID:
Hash Algorithm: sha1
Issuer Name Hash: 777A7BA877D6F10F1CE9202196FB6B1A6E37F5ED
Issuer Key Hash: 9058FFB09C75A8515477B1EDF2A34316389E6CC5
Serial Number: 07A815B675461D82B764F316AA9C64EE
Cert Status: good
This Update: Apr 24 16:21:01 2024 GMT
Next Update: May 1 15:21:01 2024 GMT
Signature Algorithm: sha256WithRSAEncryption
91:67:93:97:1f:f9:27:a7:0a:ad:e3:db:48:85:29:8e:01:e6:
9a:22:02:0f:45:9e:d3:98:f1:cb:00:12:07:f9:8f:22:7f:ea:
cc:4e:69:aa:fe:9d:46:46:19:56:c6:2f:ae:ec:59:45:ec:60:
e6:94:67:d5:44:cd:89:f0:a5:64:b6:3d:c0:a3:ab:b1:a5:e0:
ab:88:d0:14:e2:44:1b:4c:27:d5:84:75:ae:73:d9:ba:84:e3:
83:2e:80:5c:60:5c:35:a5:94:c6:9b:73:f8:24:0d:a5:66:a5:
81:f4:99:8b:31:bd:25:2a:59:e5:50:28:64:7d:85:31:c9:9c:
d2:3f:5f:45:92:c7:c8:4e:a1:f3:8d:f6:9d:3f:d5:d0:4c:17:
d5:89:40:55:7f:2d:95:af:35:b2:36:aa:88:a5:4f:90:e5:ca:
80:eb:0b:bc:1e:6b:8d:2b:a4:36:58:a1:a9:65:a3:14:5a:72:
1f:3b:5c:38:8e:3b:77:46:2a:8a:de:bc:fc:9d:7f:46:4b:fa:
83:cc:0c:87:f8:02:c3:1d:70:2f:b9:cb:cc:00:9b:22:35:b9:
86:e0:ef:b3:05:56:66:7c:f6:01:63:df:0c:d2:8d:f0:c7:35:
58:4b:03:56:de:42:51:6f:02:71:29:5c:2e:ed:d9:56:e1:c7:
41:70:5d:ec
======================================
---
Certificate chain
0 s:C = US, ST = District Of Columbia, L = Washington, O = Office of Personnel Management, CN = www.opm.gov
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
-----BEGIN CERTIFICATE-----
MIINejCCDGKgAwIBAgIQB6gVtnVGHYK3ZPMWqpxk7jANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yNDA0MTgwMDAwMDBaFw0yNTAzMjUyMzU5NTlaMIGAMQswCQYDVQQGEwJVUzEd
MBsGA1UECBMURGlzdHJpY3QgT2YgQ29sdW1iaWExEzARBgNVBAcTCldhc2hpbmd0
b24xJzAlBgNVBAoTHk9mZmljZSBvZiBQZXJzb25uZWwgTWFuYWdlbWVudDEUMBIG
A1UEAxMLd3d3Lm9wbS5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ0RerbY3bySA3dFP7JvPQAwkqqeAT6Q2oGvMO0q15RL9QKvIS2NIneKlYHVh8
VAxE0GiKUjo7tptCngPYxwgGRVfnchNkD8d2/Oumb3Je4GSGfSv0KLaXlIT02nLk
iCRTo3YablYzUwb9Sgxg7S8TO2Oa3LgZITa/D+f7jWn9o1o7Q3Xa65QmD/0O7FCV
A1JzI5E/V0MpFolRLCp06Svnt0zLzCTHy8GfALkJX5Uvg27dfOqYaFD/edSlF9BD
nqJ5gieojzQcOh3Jog09zzFqBRrTwifVBW24hjeqg9rSCwH3UCvxwI293gautbda
fJyvRz34RAtK6AXvTJTRu/0LAgMBAAGjggoPMIIKCzAfBgNVHSMEGDAWgBSQWP+w
nHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUWn15hAJ3xpRBCR8FFC4H7H1o9Ucw
ggcSBgNVHREEggcJMIIHBYILd3d3Lm9wbS5nb3aCFmFnZW5jeS5mZWR2aWV3Lm9w
bS5nb3aCEWFrYW1haS1kcy5vcG0uZ292gg9hcmNoaXZlLm9wbS5nb3aCD2F0bGFu
dGEuZmViLmdvdoIMYmV0YS5vcG0uZ292ggtjZGEub3BtLmdvdoINY2VkYXIub3Bt
LmdvdoIVY2VydC5pbnRyYW5ldC5vcG0uZ292ghBjZXJ0Lm5ldy5vcG0uZ292gg9j
b250ZW50Lm9wbS5nb3aCDGRlaXMub3BtLmdvdoIQZGV2LmF1dGgub3BtLmdvdoIR
ZGV2LmNlZGFyLm9wbS5nb3aCE2Rldi5jb250ZW50Lm9wbS5nb3aCEGRldi5lc2Nz
Lm9wbS5nb3aCD2Rldi5mZWIub3BtLmdvdoIUZGV2LmludHJhbmV0Lm9wbS5nb3aC
D2Rldi5sYWIub3BtLmdvdoIPZGV2Lm5ldy5vcG0uZ292ggtkZXYub3BtLmdvdoIP
ZGV2LnBpdi5vcG0uZ292ggtkZXYucG1mLmdvdoIQZGV2LnRoZW8ub3BtLmdvdoIR
ZGV2Mi5lc2NzLm9wbS5nb3aCDWUtcWlwLm9wbS5nb3aCD2UtcWlwYXYub3BtLmdv
doIVZS1xaXB0cmFpbmluZy5vcG0uZ292gg9laXJydWF0Lm9wbS5nb3aCEmVwaWNw
b3J0YWwub3BtLmdvdoINZXB1YXQub3BtLmdvdoIQZXB1YXRzc28ub3BtLmdvdoIM
ZXNjcy5vcG0uZ292gg1mYWNlcy5vcG0uZ292ggdmZWIuZ292ggtmZWIub3BtLmdv
doIQZmVlZGJhY2sub3BtLmdvdoIJZmVnbGkuZ292ggxmb2lhLm9wbS5nb3aCEGlu
dHJhbmV0Lm9wbS5nb3aCEGxpc3RzZXJ2Lm9wbS5nb3aCEmxvc2FuZ2VsZXMuZmVi
LmdvdoILbmV3Lm9wbS5nb3aCDm5wMnNzby5vcG0uZ292ghFucDJ1YXRzc28ub3Bt
LmdvdoIPb2N0b3B1cy5vcG0uZ292ggdvcG0uZ292gg5vcG1zc28ub3BtLmdvdoIO
b3JlZ29uLmZlYi5nb3aCB3BtZi5nb3aCDnByb2dldC5vcG0uZ292ghRzYW5mcmFu
Y2lzY28uZmViLmdvdoINc2NhbnMub3BtLmdvdoIPc2VhdHRsZS5mZWIuZ292ghRz
ZWN1cmVwb3J0YWwub3BtLmdvdoIOc2ZzZGV2Lm9wbS5nb3aCFHN0YWdpbmctdGVz
dC5vcG0uZ292ghhzdGFnaW5nLXdlYmN0ZXN0Lm9wbS5nb3aCGHN0YWdpbmctd2Vi
aXRlc3Qub3BtLmdvdoIWc3RhZ2luZy13ZWJ3dGMub3BtLmdvdoIXc3RhZ2luZy13
d3cuY2RhLm9wbS5nb3aCGHN0YWdpbmcuaW50cmFuZXQub3BtLmdvdoITc3RhZ2lu
Zy5uZXcub3BtLmdvdoIVdGVzdC5pbnRyYW5ldC5vcG0uZ292ghB0ZXN0Lm5ldy5v
cG0uZ292ggx0ZXN0Lm9wbS5nb3aCDHRoZW8ub3BtLmdvdoIUdWF0LXNzLmNlZGFy
Lm9wbS5nb3aCEHVhdC5hdXRoLm9wbS5nb3aCEXVhdC5jZWRhci5vcG0uZ292ghN1
YXQuY29udGVudC5vcG0uZ292ghB1YXQuZXNjcy5vcG0uZ292ggt1YXQuZmViLmdv
doIPdWF0LmZlYi5vcG0uZ292ggt1YXQub3BtLmdvdoILdWF0LnBtZi5nb3aCEHVh
dC50aGVvLm9wbS5nb3aCEXVhdDIuZXNjcy5vcG0uZ292ghB3ZWJjdGVzdC5vcG0u
Z292ghB3ZWJpdGVzdC5vcG0uZ292gg53ZWJ3dGMub3BtLmdvdoITd3d3LmF0bGFu
dGEuZmViLmdvdoITd3d3LmJ1ZmZhbG8uZmViLmdvdoIPd3d3LmNkYS5vcG0uZ292
ghZ3d3cuY2luY2lubmF0aS5mZWIuZ292ghN3d3cuZGV0cm9pdC5mZWIuZ292ghF3
d3cuZS1xaXAub3BtLmdvdoILd3d3LmZlYi5nb3aCDXd3dy5mZWdsaS5nb3aCEXd3
dy5mZWdsaS5vcG0uZ292ghN3d3cuaG91c3Rvbi5mZWIuZ292ghR3d3cubGlzdHNl
cnYub3BtLmdvdoIWd3d3Lmxvc2FuZ2VsZXMuZmViLmdvdoISd3d3Lm5ld2Fyay5m
ZWIuZ292ghV3d3cubmV3bWV4aWNvLmZlYi5nb3aCEnd3dy5vcmVnb24uZmViLmdv
doIWd3d3LnBpdHRzYnVyZ2guZmViLmdvdoILd3d3LnBtZi5nb3aCGHd3dy5zYW5m
cmFuY2lzY28uZmViLmdvdoITd3d3LnNlYXR0bGUuZmViLmdvdjA+BgNVHSAENzA1
MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcmwwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzAB
hhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDov
L2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAMBgNV
HRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgBOdaMnXJoQwzhb
bNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY7xl3c6AAAEAwBHMEUCIHPSeXQdxrIY
0KMNhV7e7L6MSzsPk+htMpvZClFMEOowAiEA6hrgrDm346Rj/L2iiMavfNEquBFo
t0NGGWEGezsKg5sAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAA
AY7xl3b5AAAEAwBHMEUCIEIc6yBk7wDykci80caEwRo6GoPUHBGCdCjBE451m9Tv
AiEA4FhuZjNWkyfD0poF0BtS6+rYwZoEVxs9AYxnnWbiVt0AdQDm0jFjQHeMwRBB
Btdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY7xl3cKAAAEAwBGMEQCIHdSkJISA7ze
TpywF+CJpL2wKvxUGdiKMmfdd1H3mMRBAiA6j+Oq7QjT0hlD/aBn9yynMKhvdiU+
qBhD555TwJGmkjANBgkqhkiG9w0BAQsFAAOCAQEAHqmVzRrGHzKLyVrp2u7tA/uP
BpDwAI9pObvCDnxKm3DMz75fReyVVrrfRZKiSCru7xgORJzwNsXZMnr/Nx2JmW5c
o1KGCHeSVY1XYcvhClmxk0KOFawLGuVfyck8BVJsJuMZrzXe7bBsDVSe2TnlSaJK
8omFTpuEr5WdyRTgCCADfPPn13dAodHodmskmqwX7/vO7E3vZucx0UjLmZDJbEDr
y0kMihATt5ylQmmuf/SPo7wTBZkLgh1rMJmY2127dpcD2nbdMuJnYLEIGJShGRtE
Jz2bNSmBopNEE1MrnlHu7Gn2fJi/wUtAdBz7tT3fJL5hMzPzff7XWWO10zdmaQ==
-----END CERTIFICATE-----
1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = District Of Columbia, L = Washington, O = Office of Personnel Management, CN = www.opm.gov
issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5786 bytes and written 444 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: AD3C99B40D32CE3D721BB0AEE063ED8F934BF2FCAC87C7554798A122F6C491FE
Session-ID-ctx:
Master-Key: EA90E6DF26B148585ED0828D5CD306935FB826AA2C559F2697F20F0E5DB4992EC3EAA86E54C4599EE089BD291E6CACBB
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 83100 (seconds)
TLS session ticket:
0000 - 00 00 17 4f ac 3d 13 b0-a4 3b e2 63 02 4a d2 c6 ...O.=...;.c.J..
0010 - 62 e2 81 74 16 00 f0 4f-dc 48 f2 14 0e 0f 42 b7 b..t...O.H....B.
0020 - db 8c 23 70 30 85 ff 78-50 ec 03 2e 87 85 57 e3 ..#p0..xP.....W.
0030 - 7a b4 37 6e dd 8e df ce-cb ff 9f bf e4 68 e5 8e z.7n.........h..
0040 - 53 64 84 fb 90 3c 9b 68-1a c2 b5 83 7e 5a 33 f6 Sd...<.h....~Z3.
0050 - 42 3f c0 ee bf 24 f8 57-e3 ed 57 a1 cb de e2 a7 B?...$.W..W.....
0060 - 75 36 1a 2b b9 e3 3f 84-4b 0c 83 26 92 6c d5 d2 u6.+..?.K..&.l..
0070 - ab ad 04 56 75 a9 ed c0-8b c6 9b e5 a6 66 04 1f ...Vu........f..
0080 - 6c 5c 22 64 be bb 06 b1-1a 4f 47 91 e8 e6 27 57 l\"d.....OG...'W
0090 - 49 3b 52 54 d2 9b ca d7-0e 21 a4 92 12 22 e2 57 I;RT.....!...".W
00a0 - 3c d6 44 8b ca e8 3c 08-5f d7 13 d5 4c e6 a4 38 <.D...<._...L..8
Start Time: 1714152806
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
---
DONE
