ocsptool(1) (User Commands) ocsptool(1) (NAME) ocsptool - OCSP (SYNOPSIS) ocsptool [-flags] [-flag [value]] [--option-name[[=| ]value]] . (DESCRIPTION) (CA) . (trusted) . (OPTIONS) -d num, --debug=num . . num : 0 9999 . -V, --verbose . --infile=file . --outfile=str . --ask=server name|url OCSP/HTTP . HTTP OCSP . (URL) . --load-chain --load-cert --load-issuer . . -e, --verify-response . OCSP (trust anchors) ( --load-trust ). OCSP --load-signer --load-chain . -i, --request-info OCSP. OCSP . -j, --response-info OCSP. OCSP . -q, --generate-request OCSP. --nonce, --no-nonce ( ) OCSP. no-nonce . --load-chain=file . --load-issuer=file . --load-cert=file . --load-trust=file (trust anchors) OCSP . : load-signer. OCSP . . --load-signer=file OCSP . : load-trust. --inder, --no-inder DER . no-inder . --outder DER ( ). DER . GnuTLS . --outpem PEM . PEM . -Q file, --load-request=file OCSP DER . -S file, --load-response=file OCSP DER . --ignore-errors . --verify-allow-broken MD5 . --verify-response . --attime=timestamp . (timestamp) "29 Feb 2004" "2004-02-29" . info '(coreutils) date invocation' . -v arg, --version=arg . `v' . `c' `n' . -h, --help . -!, --more-help (pager). (EXAMPLES) OCSP OCSP -i --request-info . -Q OCSP OCSP DER . $ ocsptool -i -Q ocsp-request.der : $ cat ocsp-request.der | ocsptool --request-info OCSP OCSP OCSP -j --response-info : $ ocsptool -j -Q ocsp-response.der $ cat ocsp-response.der | ocsptool --response-info OCSP -q --generate-request OCSP . OCSP DER --outfile . OCSP --load-issuer --load-cert . PEM --inder DER . $ ocsptool -q --load-issuer issuer.pem --load-cert client.pem --outfile ocsp-request.der OCSP OCSP (nonce) . --no-nonce . OCSP OCSP -e --verify-response . OCSP DER --load-response . OCSP --load-trust . PEM . OCSP Extended Key Usage OCSP (asserted) . $ ocsptool -e --load-trust issuer.pem --load-response ocsp-response.der . OCSP OCSP . --load-signer --load-trust . OCSP . Extended Key Usage . $ ocsptool -e --load-signer ocsp-signer.pem --load-response ocsp-response.der : OCSP --load-trust . OCSP . OCSP . blog.josefsson.org ( ) CACert . gnutls-cli . . $ echo | gnutls-cli -p 443 blog.josefsson.org --save-cert chain.pem Authority Information Access OCSP . certtool -i < chain.pem : Authority Information Access Information (not critical): Access Method: 1.3.6.1.5.5.7.48.1 (id-ad-ocsp) Access Location URI: https://ocsp.CAcert.org ocsptool HTTP . : $ ocsptool --ask --load-chain chain.pem HTTP OCSP . OCSP --load-cert --load-issuer : $ ocsptool --ask https://ocsp.CAcert.org --load-chain chain.pem (EXIT STATUS) : 0 (EXIT_SUCCESS) . 1 (EXIT_FAILURE) . (SEE ALSO) certtool(1) (AUTHORS) GnuTLS. (COPYRIGHT) (C) 2020-2023 Free Software Foundation . . (GNU General Public License) . (BUGS) bugs@gnutls.org . 3.8.13 29 Apr 2026 ocsptool(1)