========================  ==========  ============================================================================
CA                        Critical    Values
========================  ==========  ============================================================================
Comodo
Comodo DV                 ✗           * caIssuers: URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                                      * OCSP: URI:http://ocsp.comodoca.com
Comodo EV                 ✗           * caIssuers: URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                                      * OCSP: URI:http://ocsp.comodoca.com
DST X3
DigiCert EV Root
DigiCert Global Root
DigiCert HA Intermediate  ✗           * OCSP: URI:http://ocsp.digicert.com
DigiCert Secure Server    ✗           * OCSP: URI:http://ocsp.digicert.com
GeoTrust
GlobalSign
GlobalSign DV             ✗           * OCSP: URI:http://ocsp.globalsign.com/rootr1
GlobalSign R2
Go Daddy G2
Go Daddy G2 Intermediate  ✗           * OCSP: URI:http://ocsp.godaddy.com/
Google G3                 ✗           * OCSP: URI:http://ocsp.pki.goog/gsr2
IdenTrust
Let's Encrypt X1          ✗           * OCSP: URI:http://isrg.trustid.ocsp.identrust.com
                                      * caIssuers: URI:http://apps.identrust.com/roots/dstrootcax3.p7c
Let's Encrypt X3          ✗           * OCSP: URI:http://isrg.trustid.ocsp.identrust.com
                                      * caIssuers: URI:http://apps.identrust.com/roots/dstrootcax3.p7c
RapidSSL G3               ✗           * OCSP: URI:http://g.symcd.com
StartSSL
StartSSL class 2          ✗           * OCSP: URI:http://ocsp.startssl.com
                                      * caIssuers: URI:http://aia.startssl.com/certs/ca.crt
StartSSL class 2          ✗           * OCSP: URI:http://ocsp.startssl.com/ca
                                      * caIssuers: URI:http://aia.startssl.com/certs/ca.crt
TrustID Server A52        ✗           * OCSP: URI:http://commercial.ocsp.identrust.com
                                      * caIssuers: URI:http://validation.identrust.com/roots/commercialrootca1.p7c
========================  ==========  ============================================================================