Qualys [1] does not appear to see any issues. Do you see the same fingerprint? ruling out MitM openssl s_client -connect blog.josefsson.org:443 < /dev/n

Qualys [1] does not appear to see any issues. Do you see the same fingerprint? ruling out MitM openssl s_client -connect blog.josefsson.org:443 < /dev/null 2>/dev/null | openssl x509 -fingerprint -sha256 -noout -in /dev/stdin sha256 Fingerprint=AC:6A:41:71:DE:1C:B6:93:F0:63:56:D6:12:72:B3:27:B2:A7:C9:3F:86:4D:D9:55:63:B9:CB:CA:F6:38:83:70 This [2] may also be related. If you go to about:config and search for "security.ssl.enable_ocsp_must_staple" is it set to true? OCSP stapling offered, not revoked OCSP must staple extension supported [1] - https://www.ssllabs.com/ssltest/analyze.html?d=blog.josefsson.org https://www.ssllabs.com/ssltest/analyze.html?d=blog.josefsso... [2] - https://support.mozilla.org/en-US/questions/1149911 https://support.mozilla.org/en-US/questions/1149911