#!/bin/sh
wget -q http://www.startssl.com/certs/sub.class1.server.ca.pem -O /tmp/sub.class1.server.ca.pem; \
    openssl ocsp -CAfile /tmp/sub.class1.server.ca.pem -issuer /tmp/sub.class1.server.ca.pem \ 
    -url http://ocsp.startssl.com/sub/class1/server/ca -noverify -no_nonce \
    -header "HOST" "ocsp.startssl.com" -cert ${1}