DNS Certification Authority Authorization (CAA) Policy / DNSSEC for whonix.org / ssllabs.com test results / OCSP ERROR: Exception: connect timed out [http://r3.o.lencr.org] / Must-Staple

Yeah they are using old, not updated checker, compare that to another checkers like hardenizer or so, you wont find something wrong.

Unrelated to make the keys 100%, because even this checker is based on RSA calculations not ECC (there is no 4096 key size you can get from ECC).

1 Like