WebPagetest Forums
First Byte Time LetsEncrypt Cert: 'A' without intermediate cert; 'B' with - Printable Version

+- WebPagetest Forums (https://www.webpagetest.org/forums)
+-- Forum: WebPagetest (/forumdisplay.php?fid=7)
+--- Forum: General Discussion (/forumdisplay.php?fid=25)
+--- Thread: First Byte Time LetsEncrypt Cert: 'A' without intermediate cert; 'B' with (/showthread.php?tid=16071)



First Byte Time LetsEncrypt Cert: 'A' without intermediate cert; 'B' with - Dennis The Menace - 05-21-2020 01:21 AM

Dear Forum

We asked about this already a year ago, but we still have not found a proper solution. https://www.webpagetest.org/forums/showthread.php?tid=15749

Our Server is completely up-to-date. Qualsys gives us an A+ and likes TLS 1.3 We even have HTTP2 running... Testing from the US or Europe does not make a difference either.

To obtain a grade A here, we have to strip the intermediate Letsencrypt certificate, but - in doing so - Qualsys will then complain. With a full certificate Qualsys is happy, but here, we get a B.

Grade A :: ~400 ms :: [Stripped with just the first certificate]
https://www.webpagetest.org/performance_optimization.php?test=190415_4Y_d0811567c65b4281e3e997008372b828&run=2#first_byte_time
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISBMS6zrlqkiTZjNc5rlVXhjhbMA0GCSqGSIb3DQEBCwUA
*** 33 lines in between ***
4V/GVuFPm3bQLHl8kzk=
-----END CERTIFICATE-----


Grade B :: ~800 ms [Not stripped with first and intermediate certificate]
https://www.webpagetest.org/performance_optimization.php?test=190415_QH_3f2e67bb86ac5c03795c1d191a46b806&run=3#first_byte_time
----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISBMS6zrlqkiTZjNc5rlVXhjhbMA0GCSqGSIb3DQEBCwUA
*** 33 lines in between ***
4V/GVuFPm3bQLHl8kzk=
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIQCgFBQgAAAVOFc2oLheynCDANBgkqhkiG9w0BAQsFADA/
*** 23 lines in between ***
KOqkqm57TH2H3eDJAkSnh6/DNFu0Qg==
-----END CERTIFICATE-----

Does anybody know how the have an A (for First Byte Time) here and an A+ with Qualsys at the same time - using Letsencrypt? Thanks so much.

Dennis