PKI --OCSP(1)                     strongSwan                     PKI --OCSP(1)

<?><?><?> (NAME)
       pki --ocsp - <?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?> OCSP <?>
       <?><?><?><?><?><?><?><?><?><?><?> OCSP.

<?><?><?><?><?> <?><?><?><?><?> (SYNOPSIS)
       pki --ocsp [--in file] [--cacert file] [--debug level]


       pki --ocsp --respond [--in file] --cacert file [--key file|--keyid hex]
                  [--cert file|--certid hex] [--index file]
                  [--lifetime minutes] [--digest digest]
                  [--rsa-padding padding] [--debug level]

       pki --ocsp --options file

       pki --ocsp -h | --help

<?><?><?><?><?><?><?> (DESCRIPTION)
       <?><?><?> <?><?><?><?><?><?><?><?> <?><?> pki(1) <?><?>
       <?><?><?><?><?><?><?> Online Certificate Status Protocol (OCSP) <?><?>
       <?><?><?><?><?><?><?><?> <?><?> <?><?> RFC 6960 <?><?><?><?><?>
       <?><?><?> <?><?><?> <?><?><?><?><?> <?><?><?><?><?><?> <?> <?><?>
       <?><?><?><?><?><?> --respond <?><?> <?><?><?><?> OCSP <?><?>
       <?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?><?><?>
       <?><?><?><?><?> <?><?><?><?><?><?><?><?>.  <?><?><?><?><?>
       <?><?><?><?><?> <?><?><?><?> <?><?><?> <?><?><?>
       <?><?><?><?><?><?><?><?> <?><?><?><?> <?><?><?><?><?><?><?><?><?>
       <?><?><?><?><?> <?><?><?><?> <?><?><?><?><?><?><?><?> <?><?>
       <?><?><?><?> <?><?><?> <?><?><?><?><?><?><?> <?><?> <?><?><?><?><?><?>
       --index<?> <?><?><?> <?><?><?><?><?> <?><?> <?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?> openxpki <?> mysql
       <?><?><?> <?><?> <?><?><?><?><?><?> <?><?><?><?><?><?><?><?> <?><?>
       <?><?><?><?><?><?><?><?><?><?><?><?> <?><?><?><?><?> certificate <?><?>
       <?><?><?><?> OpenXPKI (<https://openxpki.org>) <?><?><?><?><?><?>
       <?><?><?><?> <?><?><?>.

<?><?><?><?><?><?><?><?> (OPTIONS)
       -h, --help
              <?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?>
              <?><?><?><?><?><?><?> <?><?><?><?><?><?><?><?>
              <?><?><?><?><?><?><?><?> <?><?> <?><?><?><?><?><?><?><?><?>
              <?><?><?><?><?>.

       -v, --debug level
              <?><?><?><?><?> <?><?><?> <?><?><?><?><?><?><?><?><?><?><?>
              (<?><?><?><?><?>)<?> <?><?><?><?><?><?><?>: 1.

       -+, --options file
              <?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?> <?><?>
              <?><?><?><?><?> <?><?> file.

       -i, --in file
              <?><?><?><?><?><?><?> OCSP. <?><?> <?><?><?><?> <?><?><?><?>
              <?><?><?><?><?> <?><?><?><?><?><?><?> OCSP <?><?> STDIN
              <?><?><?><?><?><?> <?><?><?><?><?><?>.

       -C, --cacert file
              <?><?><?><?><?> CA <?><?><?><?><?><?> <?><?> <?><?><?> <?><?>
              <?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?>
              <?><?><?><?><?> <?><?> <?><?><?><?><?><?><?> OCSP. <?><?><?>
              <?><?><?><?><?><?><?> OCSP <?><?><?><?> <?><?><?>
              <?><?><?><?><?> <?><?> <?><?><?><?><?> CA <?><?>
              <?><?><?><?><?><?><?> <?><?><?><?><?><?> <?><?> <?><?><?><?><?>
              <?><?><?><?><?><?>. <?><?><?><?><?><?><?><?> <?><?><?><?><?>
              <?><?><?> <?><?><?><?><?><?><?> <?><?><?>.

       -k, --key file
              <?><?><?><?> <?><?><?><?><?><?><?><?><?><?> OCSP.
              <?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?>
              <?><?><?><?><?><?><?> <?><?><?>.

       -K, --keyid hex
              <?><?><?><?><?><?> <?><?><?> (handle) <?><?><?><?><?> <?><?>
              <?><?><?><?> <?><?><?><?><?><?><?><?><?><?> OCSP <?><?>
              <?><?><?><?> <?><?><?><?><?><?> <?><?> TPM 2.0.
              <?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?>
              <?><?><?><?><?><?><?> <?><?><?>.

       -c, --cert file
              <?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?> OCSP (<?><?>
              <?><?><?><?><?> <?><?> <?><?><?><?><?> CA <?><?><?><?><?>).
              <?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?>
              <?><?><?><?><?><?><?> <?><?><?>.

       -X, --certid hex
              <?><?><?><?><?><?> <?><?><?> (handle) <?><?><?><?><?> <?><?>
              <?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?> OCSP <?><?>
              <?><?><?><?> <?><?><?><?><?><?> <?><?> TPM 2.0.
              <?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?>
              <?><?><?><?><?><?><?> <?><?><?>.

       -x, --index file
              <?><?><?><?> index.txt <?><?> <?><?><?> OpenSSL <?><?>
              <?><?><?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?>
              <?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?>
              <?><?><?><?><?> CA <?><?><?><?><?><?><?><?><?><?><?><?>
              <?><?><?><?><?><?> <?><?><?> <?><?> <?><?> <?><?>
              <?><?><?><?><?> <?><?><?><?><?><?>. <?><?> <?><?><?><?><?>
              <?><?> <?><?><?><?><?> <?><?><?><?><?> CA <?><?><?><?>
              <?><?><?><?><?> <?><?><?><?> <?><?><?><?><?><?><?><?>
              <?><?><?><?><?> <?><?><?> <?><?><?><?><?><?><?> <?><?><?><?>
              <?><?><?> <?><?><?> <?><?><?><?> <?><?> <?><?> <?><?><?><?>
              index.txt <?><?><?><?><?><?><?><?> <?><?> <?><?> <?><?><?><?><?>
              CA <?><?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?>.

              <?><?><?><?> <?><?><?><?><?><?><?> <?><?><?> <?><?><?><?><?><?>
              <?><?><?> <?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?>
              <?><?><?><?><?><?>.

       -l, --lifetime minutes
              <?><?><?><?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?> OCSP
              <?><?><?><?><?> <?><?><?><?><?> (<?><?> <?><?><?><?> <?><?><?>
              <?><?><?><?><?><?> <?><?><?><?> nextUpdate <?><?><?>
              <?><?><?><?><?><?>).

       -g, --digest digest
              <?><?><?><?><?> <?><?> <?><?><?><?><?><?> (digest) <?><?><?><?>
              <?><?><?><?><?><?><?> <?><?><?><?> <?><?><?><?><?> <?><?><?><?>.
              <?><?><?> <?><?> <?><?><?><?><?> md5<?> sha1<?> sha224<?>
              sha256<?> sha384 <?><?> sha512<?> sha3_224<?> sha3_256<?>
              sha3_384<?> sha3_512. <?><?><?><?><?> <?><?><?><?><?><?><?>
              <?><?> <?><?><?><?> <?><?><?> <?> <?><?><?><?><?><?><?>
              <?><?><?><?> <?><?><?><?><?> OCSP <?><?><?><?><?>
              <?><?><?><?><?><?>.

       -R, --rsa-padding padding
              <?><?><?><?><?> (padding) <?><?><?><?> <?><?><?><?><?><?><?>
              <?><?><?><?> <?><?><?><?><?><?><?> RSA. <?><?><?><?><?><?><?><?>
              pkcs1 <?><?> pss <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?>
              <?><?><?> pkcs1 <?><?><?>.  <?><?> <?><?><?> <?><?> <?><?>
              <?><?><?><?> index.txt <?><?> <?><?> <?><?><?><?>
              <?><?><?><?><?> <?><?><?> <?><?> <?><?>
              <?><?><?><?><?><?><?><?><?> <?><?> (tab) <?><?>
              <?><?><?><?><?><?> <?><?><?> <?><?><?><?><?><?><?>:

              <?><?><?><?> <?><?><?> <?><?><?><?><?><?><?><?><?><?>
              <?><?><?><?><?> <?><?><?><?><?> <?><?><?> <?><?>
              <?><?><?><?><?><?><?><?> "V" (<?><?><?><?> <?><?><?><?><?> -
              valid)<?> "E" (<?><?><?><?> <?><?><?><?><?><?><?><?><?> -
              expired<?> <?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?>
              <?><?><?><?><?> <?><?><?><?><?><?>) <?><?> "R" (<?><?><?><?>
              <?><?><?><?><?><?><?><?> - revoked) <?><?><?><?>.

              <?><?><?><?> <?><?><?> <?><?><?><?> <?><?><?><?><?> <?>
              <?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?> <?><?> UTC <?>
              <?><?> <?><?><?><?> YYMMDDHHMMSSZ <?><?><?>. <?><?><?>
              <?><?><?><?> <?><?><?><?> <?><?><?><?><?> <?><?><?><?><?><?>
              <?><?><?><?><?> <?><?><?><?><?><?> <?><?><?> <?><?><?><?><?>
              <?><?><?><?> <?><?><?><?>.

              <?><?><?><?> <?><?><?> <?><?><?><?><?> <?> <?><?><?><?>
              <?><?><?><?><?> <?><?> UTC <?><?> <?><?><?><?> YYMMDDHHMMSSZ <?>
              <?><?> <?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?>
              <?><?><?><?><?> <?><?><?> <?><?> <?><?><?><?><?><?><?><?> <?><?>
              <?><?> <?><?> <?><?><?><?><?><?> <?> <?><?> <?><?><?><?><?><?>
              <?><?><?> <?><?><?><?><?><?>. <?><?><?><?><?> <?><?><?><?><?>
              <?><?><?><?><?><?><?> <?><?> "keyCompromise"<?>
              "CACompromise"<?> "affiliationChanged"<?> "superseded"<?>
              "cessationOfOperation"<?> "certificateHold" <?>
              "removeFromCRL"<?> <?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?>
              <?><?><?> <?><?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?>
              "unspecified" <?><?><?><?><?><?>.

              <?><?><?><?> <?><?><?><?><?> <?><?><?><?> <?><?><?><?><?>
              <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?><?><?>
              <?><?><?><?><?><?><?><?><?><?> <?><?><?>.

              <?><?><?><?><?><?><?><?> <?><?><?><?> <?> <?><?><?> <?><?>
              <?><?> <?><?><?><?> <?><?><?><?><?> <?><?><?><?><?><?>
              <?><?><?><?><?> <?><?><?><?><?><?><?><?>
              <?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?>
              <?><?> <?><?><?><?><?><?> <?><?><?><?> <?><?><?> <?><?><?>.
              <?><?><?><?><?> <?><?><?><?><?><?><?><?><?> <?><?><?><?>
              <?><?><?><?><?> <?><?> <?><?><?><?><?> (<?><?><?><?><?><?><?>
              <?><?><?><?><?><?><?><?><?> <?><?><?> "unknown") <?> DN
              <?><?><?><?><?> (subject DN) <?><?><?><?><?> <?><?><?><?><?>
              <?><?> <?><?> <?><?><?><?> RDN<?><?> <?><?> <?><?> <?><?>
              <?><?><?> <?><?><?><?><?><?>.

              <?><?><?><?> index.txt:

       V    310930122422Z       03  unknown /C=CH/O=strongSwan/CN=moon...
       V    310930122422Z       04  unknown /C=CH/O=strongSwan/CN=sun...
       R    310930122422Z   231002122422Z,keyCompromise 88
       V    Z       05

       <?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?><?>
       <?><?> <?><?> <?><?> <?><?><?><?><?><?> <?><?><?>
       <?><?><?><?><?><?><?>. <?><?><?><?><?><?><?><?> <?><?><?>
       <?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?>
       <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?> <?><?><?><?>
       <?><?><?><?><?><?><?>. <?><?><?> <?><?><?> <?><?> <?><?><?>
       <?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?><?>
       <?><?><?> <?><?> <?><?><?><?> <?><?><?><?><?><?><?> <?> <?><?><?>
       <?><?><?><?><?> <?><?><?> <?><?> <?><?> <?><?><?><?><?>
       <?><?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?><?><?>
       <?><?><?><?><?><?>.

<?><?><?><?><?><?><?> (EXAMPLES)
       <?><?><?><?><?> <?><?><?><?><?><?> <?><?><?> <?><?>
       <?><?><?><?><?><?><?> OCSP:

       pki --ocsp --in req_ca.der

       nonce:               5b:14:e3:cc:d5:b2:65:ec:c4:0d:c3:11:37:6a:9d:71
         issuerKeyHash:     b6:76:79:95:b5:58:..:06:93:f3:39:79:19 (no match)
         issuerNameHash:    af:25:78:ce:fc:15:..:67:95:81:31:a3:4d (no match)
         serialNumber:      4f:33:21:1d:4d:fd:9b:db
         issuerKeyHash:     b6:76:79:95:b5:58:..:06:93:f3:39:79:19 (no match)
         issuerNameHash:    af:25:78:ce:fc:15:..:67:95:81:31:a3:4d (no match)
         serialNumber:      68:f2:93:10:65:d0:5e:d1

       <?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?> <?><?><?><?><?><?><?>
       OCSP <?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?> <?><?><?><?>:

       pki --ocsp --in req_ca.der --cacert cacert.pem

       nonce:               5b:14:e3:cc:d5:b2:65:ec:c4:0d:c3:11:37:6a:9d:71
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Root CA"
         issuerKeyHash:     b6:76:79:95:b5:58:..:06:93:f3:39:79:19 (ok)
         issuerNameHash:    af:25:78:ce:fc:15:..:67:95:81:31:a3:4d (ok)
         serialNumber:      4f:33:21:1d:4d:fd:9b:db
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Root CA"
         issuerKeyHash:     b6:76:79:95:b5:58:..:06:93:f3:39:79:19 (ok)
         issuerNameHash:    af:25:78:ce:fc:15:..:67:95:81:31:a3:4d (ok)
         serialNumber:      68:f2:93:10:65:d0:5e:d1

       <?><?><?><?> <?><?> <?><?><?><?><?><?><?> OCSP <?><?><?><?><?> <?><?>
       <?><?><?><?> <?><?> <?><?><?><?> OCSP <?><?><?><?> <?><?><?> CA
       <?><?><?><?> <?><?><?> <?><?><?><?>:

       pki --ocsp --respond --in req_ca.der --cacert cacert.pem --key cakey.pem \
                  --lifetime 10 > rsp_ca.der

       nonce:               5b:14:e3:cc:d5:b2:65:ec:c4:0d:c3:11:37:6a:9d:71
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Root CA"
         issuerKeyHash:     b6:76:79:95:b5:58:..:06:93:f3:39:79:19 (ok)
         issuerNameHash:    af:25:78:ce:fc:15:..:67:95:81:31:a3:4d (ok)
         serialNumber:      4f:33:21:1d:4d:fd:9b:db
         thisUpdate:        Oct 19 15:54:15 UTC 2023
         nextUpdate:        Oct 19 16:04:15 UTC 2023
         certValidation:    GOOD
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Root CA"
         issuerKeyHash:     b6:76:79:95:b5:58:..:06:93:f3:39:79:19 (ok)
         issuerNameHash:    af:25:78:ce:fc:15:..:67:95:81:31:a3:4d (ok)
         serialNumber:      68:f2:93:10:65:d0:5e:d1
         thisUpdate:        Oct 19 15:54:15 UTC 2023
         nextUpdate:        Oct 19 16:04:15 UTC 2023
         certValidation:    GOOD
       trusted signer:     "C=CH, O=strongSwan Project, CN=strongSwan Root CA"
       ocspResponseStatus:  successful

       <?><?><?><?> <?><?> <?><?> <?><?><?><?><?><?><?> OCSP
       <?><?><?><?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?><?>
       <?><?><?><?> <?><?><?><?><?><?>:

       pki --ocsp --respond --in req_signed.der --cacert cacert.pem --cacert issuer1.pem \
                  --key signerKey1.pem --cert signerCert1.pem --lifetime 10 > rsp_signed.der

       requestor:          "C=CH, O=strongSwan Project, CN=vpn.strongswan.org"
         using certificate "C=CH, O=strongSwan Project, CN=vpn.strongswan.org"
         using trusted intermediate ca certificate "C=CH, O=strongSwan Project, CN=strongSwan Issuing CA 1"
         using trusted ca certificate "C=CH, O=strongSwan Project, CN=strongSwan Root CA"
         reached self-signed root ca with a path length of 1
       requestor is trusted
       nonce:               a8:0f:29:0f:08:9c:29:c1:0d:a8:cb:b0:21:fa:e1:f7
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Issuing CA 1"
         issuerKeyHash:     5a:1b:ec:17:f0:6d:..:a2:c8:e7:6a:84:20 (ok)
         issuerNameHash:    df:1e:24:71:96:e6:..:b9:82:18:45:e7:09 (ok)
         serialNumber:      04:ff:cc:8d:36:91:cb:35:d7:c4
         thisUpdate:        Oct 19 16:30:54 UTC 2023
         nextUpdate:        Oct 19 16:40:54 UTC 2023
         certValidation:    REVOKED
         revocationTime:    Mar 26 06:41:54 UTC 2023
         revocationReason:  superseded
       trusted signer:     "C=CH, O=strongSwan Project, CN=OCSP signer of strongSwan Issuing CA 1"
       ocspResponseStatus:  successful

       <?><?><?><?> <?><?> <?><?> <?><?><?><?><?><?><?> OCSP <?><?><?><?>
       <?><?> <?><?><?><?> <?><?> <?><?><?><?><?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?>
       <?><?><?><?> <?><?> <?><?><?><?><?><?><?><?><?> OCSP <?><?><?><?><?>.
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?> OCSP <?><?><?><?>
       <?><?><?><?><?><?><?> <?><?><?><?> <?><?><?><?><?> <?><?><?><?> OCSP
       <?><?> <?><?><?><?> <?><?><?><?><?><?>:

       pki --ocsp --respond --in req.der --cacert issuer1.pem --cacert issuer2.pem \
                  --key signerKey1.pem --cert signerCert1.pem \
                  --key signerKey2.pem --cert signerCert2.pem \
                  --lifetime 10 > rsp_trusted.der

       nonce:               a1:33:aa:bc:96:60:69:76:f3:bc:9c:88:3b:07:50:47
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Issuing CA 2"
         issuerKeyHash:     72:41:ca:f9:35:87:..:d3:83:ab:d5:89:7b (ok)
         issuerNameHash:    5e:b2:b4:42:e1:a5:..:b2:c3:9a:38:4f:cd (ok)
         serialNumber:      29:ff:36:d9:9a:21:49:61:91:1d
         thisUpdate:        Oct 19 16:02:35 UTC 2023
         nextUpdate:        Oct 19 16:12:35 UTC 2023
         certValidation:    REVOKED
         revocationTime:    Sep 22 13:13:04 UTC 2023
         revocationReason:  superseded
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Issuing CA 1"
         issuerKeyHash:     5a:1b:ec:17:f0:6d:..:a2:c8:e7:6a:84:20 (ok)
         issuerNameHash:    df:1e:24:71:96:e6:..:b9:82:18:45:e7:09 (ok)
         serialNumber:      10:ff:45:9a:6d:ee:4c:ec:7c:97
         thisUpdate:        Oct 19 16:02:35 UTC 2023
         nextUpdate:        Oct 19 16:12:35 UTC 2023
         certValidation:    FAILED
       there are multiple known issuers
       trusted signer:     "C=CH, O=strongSwan Project, CN=OCSP signer of strongSwan Issuing CA 2"
       ocspResponseStatus:  successful

       <?><?><?><?><?> <?><?><?><?> OCSP <?><?><?><?><?> <?><?><?> <?><?>
       <?><?> <?><?><?><?><?> <?><?><?><?><?> OCSP
       <?><?><?><?><?><?><?><?><?><?> (self-signed):

       pki --ocsp --respond --in req.der --cacert issuer1.pem --cacert issuer2.pem \
                  --key signerKey.pem --cert signerCert.pem --lifetime 10 > rsp_self_signed.der

       nonce:               a1:33:aa:bc:96:60:69:76:f3:bc:9c:88:3b:07:50:47
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Issuing CA 2"
         issuerKeyHash:     72:41:ca:f9:35:87:..:d3:83:ab:d5:89:7b (ok)
         issuerNameHash:    5e:b2:b4:42:e1:a5:..:b2:c3:9a:38:4f:cd (ok)
         serialNumber:      29:ff:36:d9:9a:21:49:61:91:1d
         thisUpdate:        Oct 19 16:13:23 UTC 2023
         nextUpdate:        Oct 19 16:23:23 UTC 2023
         certValidation:    REVOKED
         revocationTime:    Sep 22 13:13:04 UTC 2023
         revocationReason:  superseded
       issuer:             "C=CH, O=strongSwan Project, CN=strongSwan Issuing CA 1"
         issuerKeyHash:     5a:1b:ec:17:f0:6d:..:a2:c8:e7:6a:84:20 (ok)
         issuerNameHash:    df:1e:24:71:96:e6:..:b9:82:18:45:e7:09 (ok)
         serialNumber:      10:ff:45:9a:6d:ee:4c:ec:7c:97
         thisUpdate:        Oct 19 16:13:23 UTC 2023
         nextUpdate:        Oct 19 16:23:23 UTC 2023
         certValidation:    GOOD
       there are multiple known issuers
       self-signed signer: "C=CH, O=strongSwan Project, CN=strongSwan OCSP signer"
       ocspResponseStatus:  successful

<?><?><?><?><?><?> <?><?><?><?><?><?> (SEE ALSO)
       pki(1)

6.1.0                             2023-10-29                     PKI --OCSP(1)