Description
SUPPORTS_OCSP_STAPLING is no longer included in the json output. The guideline report says, that SUPPORTS_OSCP wasn't tested, yet.
"checkName": "Certificates shall be issued by CA that publishes revocation information in OCSP responses",
"adherence": "CHECK_FAILED",
"hint": null,
"property": "SUPPORTS_OCSP",
"expectedResult": {
"type": "TestResults",
"value": "TRUE"
},
"actualResult": {
"type": "TestResults",
"value": "NOT_TESTED_YET"
}
However, the certificateReportList in CERTIFICATE_CHAINS[value] cleary states that OSCP Stapling is not supported:
"weakDebianKey": null,
"issuer": "C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1",
"x509SignatureAlgorithm": "SHA256_WITH_RSA_ENCRYPTION",
"signatureAlgorithm": "RSA_PKCS1",
"namedCurve": null,
"hashAlgorithm": "SHA256",
"extendedValidation": null,
"certificateTransparency": null,
"ocspMustStaple": null,
"crlSupported": null,
"ocspSupported": false, <<<<<<<<<<<<<<
"revoked": null,
Further SUPPORTS_TLS13_SESSION_TICKETS is missing from the JSON output.