Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://3-d-lab.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=3-d-lab.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=3-d-lab.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=3-d-lab.jp
And you can
check your domain name
.
#
Certificate of
3-d-lab.jp
{ "serial": "0F68FB129AD63C2C6F7E6E259A0B90CE", "OCSP_serial": "0F68FB129AD63C2C6F7E6E259A0B90CE", "OCSP_cert_status": "good", "OCSP_this_update": "Mar 27 14:32:47 2024 GMT", "OCSP_next_update": "Apr 3 14:32:46 2024 GMT", "domainName": "3-d-lab.jp", "port": 443, "subjectAltName": "DNS:3-d-lab.jp, DNS:cpanel.3-d-lab.jp, DNS:cpcalendars.3-d-lab.jp, DNS:cpcontacts.3-d-lab.jp, DNS:mail.3-d-lab.jp, DNS:webdisk.3-d-lab.jp, DNS:webmail.3-d-lab.jp, DNS:www.3-d-lab.jp", "is_valid": true, "CA": "cPanel, Inc.", "updated_at": "2024/02/13 09:00:00", "expires_at": "2024/05/14 08:59:59", "today": "2024/03/29 15:45:27", "UTC": { "updated_at": "2024-02-13T00:00:00Z", "expires_at": "2024-05-13T23:59:59Z", "today": "2024-03-29T06:45:27Z" }, "remaining_days": 45 }
#
OCSP response of
3-d-lab.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: 7E035A65416BA77E0AE1B89D08EA1D8E1D6AC765 Produced At: Mar 27 14:32:47 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 93B9FA878A7AEE4BF3FD5A2D574A3451CE84CB7C Issuer Key Hash: 7E035A65416BA77E0AE1B89D08EA1D8E1D6AC765 Serial Number: 0F68FB129AD63C2C6F7E6E259A0B90CE Cert Status: good This Update: Mar 27 14:32:47 2024 GMT Next Update: Apr 3 14:32:46 2024 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 0e:73:d3:fb:2e:f0:06:71:22:e3:b6:43:d8:f3:4b:0a:ab:b4: fc:0f:82:f7:90:0a:ec:f5:66:c5:75:29:1b:00:6a:04:2d:13: 8a:d7:d5:4b:7e:dc:0b:8d:81:3d:d3:6c:37:d9:a8:66:d9:ac: 9a:51:d3:3f:ae:e6:15:ae:fc:93:78:ac:9c:18:83:30:ce:a0: 36:cd:7e:b3:e1:b5:07:c7:56:d7:15:f7:3e:35:99:c4:3a:45: 7c:1f:63:83:92:99:91:73:f5:dd:46:5a:1d:0b:b1:39:0e:13: 5b:4c:ea:c2:b4:60:7d:5a:d4:b2:ba:9c:59:00:cb:3d:94:5b: af:a1:eb:ba:e3:fa:f6:d2:1d:b2:02:03:78:82:2d:18:9e:a7: 4f:e9:0e:cb:f4:58:1f:90:ce:7c:72:ba:7d:88:28:7c:60:15: fc:a7:be:1a:95:54:20:56:1f:91:96:da:45:6f:c7:2b:15:37: 1d:e6:87:91:76:ce:9e:e3:d1:fa:39:95:f3:cc:a6:1a:3c:f7: f1:2f:de:ac:f7:9c:e6:90:97:c3:fc:1a:03:44:2a:1e:97:14: a0:f4:cb:fc:3a:d9:7f:68:59:8d:18:45:05:23:81:06:fd:10: 6d:53:1a:a5:c1:3b:9e:3e:0b:23:60:0a:66:73:d3:6c:03:a4: b9:d8:0a:f9 ====================================== --- Certificate chain 0 s:CN = 3-d-lab.jp i:C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Feb 13 00:00:00 2024 GMT; NotAfter: May 13 23:59:59 2024 GMT 1 s:C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" i:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384 v:NotBefore: May 18 00:00:00 2015 GMT; NotAfter: May 17 23:59:59 2025 GMT 2 s:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA384 v:NotBefore: Jan 1 00:00:00 2004 GMT; NotAfter: Dec 31 23:59:59 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIQD2j7EprWPCxvfm4lmguQzjANBgkqhkiG9w0BAQsFADBy MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVFgxEDAOBgNVBAcTB0hvdXN0b24xFTAT BgNVBAoTDGNQYW5lbCwgSW5jLjEtMCsGA1UEAxMkY1BhbmVsLCBJbmMuIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MB4XDTI0MDIxMzAwMDAwMFoXDTI0MDUxMzIzNTk1 OVowFTETMBEGA1UEAxMKMy1kLWxhYi5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALyHW6zzZTxGUXIAjOeew8/4yaVKV2sqBYwUf4wYbRcHKypeQ7ab EY72v0vnOpdsCpLX5eVJu+D4CsFGP7S0afwJrE0CbncKalJ/uhc1TwwTnrxdczSe HeqiO0dK6cdzN1uPE+3oA6m8d+ElTn4z8SsSXQB8RIx0A5SsDuSC58P+spOp4n5N bY4lkcAckx2hkHTBv+Hpz9uyB4fpo7O381qBKcPrNi6R3hNnkR4zhp8NjebJM3VG xaDQHcXnjGxoAXU9r3i/o0Ft3vgPel/tShj3lJBj4wrjydHGvDnliBP0E3NoDJnD h6REFWZFesrsOF+ATWbbj6YswPghR/wAGLsCAwEAAaOCA0UwggNBMB8GA1UdIwQY MBaAFH4DWmVBa6d+CuG4nQjqHY4dasdlMB0GA1UdDgQWBBSrhHMsPm4qh3Q3D/j7 JoEphScXkTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICNDAl MCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEw TAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9jYS5jb20vY1BhbmVs SW5jQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwfQYIKwYBBQUHAQEEcTBvMEcG CCsGAQUFBzAChjtodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9jUGFuZWxJbmNDZXJ0 aWZpY2F0aW9uQXV0aG9yaXR5LmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au Y29tb2RvY2EuY29tMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdv+IPwq2+5VR wmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNocolBgAABAMARjBEAiB/Dq2NXdc/ Up2KiJxFR2nbvDtljfBgbSOXyZANYEiEngIgSq9ttUMtEh9CVDi6i5Evuv4z2qy8 bczMF0P6IjLCrG0AdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAA AY2hyiUqAAAEAwBHMEUCIQDkDPH3S2fV6rLwu0dtR1/3oWxy+zxXxZhsogT56psP gQIgSDUCOyboFMj6HmWt3WBAllRwQfXYkhXyavunrN0ZlsowgaIGA1UdEQSBmjCB l4IKMy1kLWxhYi5qcIIRY3BhbmVsLjMtZC1sYWIuanCCFmNwY2FsZW5kYXJzLjMt ZC1sYWIuanCCFWNwY29udGFjdHMuMy1kLWxhYi5qcIIPbWFpbC4zLWQtbGFiLmpw ghJ3ZWJkaXNrLjMtZC1sYWIuanCCEndlYm1haWwuMy1kLWxhYi5qcIIOd3d3LjMt ZC1sYWIuanAwDQYJKoZIhvcNAQELBQADggEBADAIBunwHW9zJY9wNkiDIe32/BD+ XmRRa+kpgN1eM0u6vs9etpP4LdfzvdyhUOF6Wch2rXhh9FXYg18xE/gTBg3oKyQV zDfJCmbqKAUPEU0U+ZY9KhakbUZ+JUw/erWgZO1M/GSJHiM1s91vqwHLlGXHnP1n LoHVnlxwTvfw3t+QfeykioJ+vswPWQFeXaLWX0+o3lQCdYkSS4WtOS3A9+y0Z1iw RSP1qGqnI0OIZbfQxq9+IDJbgeKnAWZZjrQi6wm9K847hpkahtI60i0o89GA1xof fWquWMzHH3LG61wm4Q+FdBIEBNSnNGDr6xfPStJhUQGIul/K6a9SuNdHBX4= -----END CERTIFICATE----- subject=CN = 3-d-lab.jp issuer=C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 5542 bytes and written 401 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
3-d-lab.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.