Siehe dazu der Output von testssl.sh:
Common Name (CN) cybernation.fm (CN in response to request w/o SNI: web2025.lagedernation.org )
subjectAltName (SAN) cybernation.fm www.cybernation.fm
Trust (hostname) Ok via SAN and CN (SNI mandatory)
Chain of trust NOT ok (expired)
EV cert (experimental) no
Certificate Validity (UTC) expired (2026-01-31 04:05 --> 2026-05-01 04:05)
ETS/"eTLS", visibility info not present
Certificate Revocation List http://e7.c.lencr.org/73.crl
OCSP URI --
OCSP stapling not offered
OCSP must staple extension --
DNS CAA RR (experimental) not offered
Certificate Transparency yes (certificate extension)
Certificates provided 2
Issuer E7 (Let's Encrypt from US)
Intermediate cert validity #1: ok > 40 days (2027-03-12 23:59). E7 <-- ISRG Root X1
Intermediate Bad OCSP (exp.) Ok
Cheers
Thomas