Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://ace-d.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=ace-d.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=ace-d.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=ace-d.jp
And you can
check your domain name
.
#
Certificate of
ace-d.jp
{ "serial": "0F8129236A53A428E8F7FF8142E03D78", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "ace-d.jp", "port": 443, "subjectAltName": "DNS:ace-d.jp, DNS:www.ace-d.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2026/08/17 09:00:00", "expires_at": "2027/03/03 08:59:59", "today": "2026/09/28 13:07:02", "UTC": { "updated_at": "2026-08-17T00:00:00Z", "expires_at": "2027-03-02T23:59:59Z", "today": "2026-09-28T04:07:02Z" }, "remaining_days": 155 }
#
OCSP response of
ace-d.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN=ace-d.jp i:C=US, O=Amazon, CN=Amazon RSA 2048 M01 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 17 00:00:00 2026 GMT; NotAfter: Mar 2 23:59:59 2027 GMT 1 s:C=US, O=Amazon, CN=Amazon RSA 2048 M01 i:C=US, O=Amazon, CN=Amazon Root CA 1 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 23 22:21:28 2022 GMT; NotAfter: Aug 23 22:21:28 2030 GMT 2 s:C=US, O=Amazon, CN=Amazon Root CA 1 i:C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIQD4EpI2pTpCjo9/+BQuA9eDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTI2MDgxNzAwMDAwMFoXDTI3MDMwMjIzNTk1OVowEzER MA8GA1UEAxMIYWNlLWQuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR7mB46i+kXdPCu6dvxqYjmTgRbaydEJ+S/bu10bNn/I5A1mehAP+n2dd3sI3X vaxdgxsLDe4izxbNW1e80Gx22RbMxwIQYeCPlZYVBEKrZolR3PQmaAwMbUmZmlGy Co2nlHgVq2blA1pqoVftXnTPWTEsKbDx1WiqERA4fMufKEL5U+n8bU7FwR8G8Jck Xn/xuUFsxNs7UIvsMjl1gSIZbawuS/p+eA6nHGruWIJT5b04FXnZSPDcUysOVQVk DipzasM8jrK3t22gJo/WpMVvUK7JVzB/kAG8PbnPWTTfAp5Bi99xeyrzePSi3VFn RI+/B9NCQx039l83/FidTwOHAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAWgBSBuA5j iokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUIcSdJLqboeBj79HVkBZ86onnoYgw IQYDVR0RBBowGIIIYWNlLWQuanCCDHd3dy5hY2UtZC5qcDATBgNVHSAEDDAKMAgG BmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwOwYD VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20v cjJtMDEuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCC AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcATGPcmOWcHauI9h6KPd6uj6tEozd7 X5uUw/uhnPzBviYAAAGgD+tNDAAABAMASDBGAiEAy8QGr7G/iuk4IlCbz0GQuGYZ X0+hISeAXKATrAhBV1sCIQDQ1sb0tB0swzxwTEj2vFslonpFKLX5yTcmZZGb2U+C nwB1AETCvQzpFA5kpclKAZMKWqG7NZcOAO4RFoloKhxE17VmAAABoA/rTScAAAQD AEYwRAIgOroRR+gkJwnen3rGa9AU5Ehef1/rW7kEMRP1W71ols0CIFe9U+UYuDnx ftNV9z6YrMLb19Wzwa3ALO4n/N3E9KSLAHYAHJ9oLOn68EVpUPgbloqH3dsyENhM 5siy44JSSsTPWZ8AAAGgD+tNygAABAMARzBFAiAawYONYz0xOgJsUr5vYx1AFSH5 SgtTLaShHRKiF+RBgAIhAJ86X5MUSHOgSi9mg3G/64aEO4ThlwIKIZND8fynKFvH MA0GCSqGSIb3DQEBCwUAA4IBAQC9zcElHiNa48HI8CzaTbJIw7ZYlWLqhjeW4Tgc +BZPOhYdu35oH7It5Uwcz81QnPIoCsgsUw0U6O1r+TtyNO6WNwVb4ZGO+GMqGlwl 33rLp0O3KeY1xhDH9rk23lYqeMihknWzhSVZd+faKsOggg7ck0Z0lvtcoi1yI6+y KZE4CqPgHuT59VVjnshPTvt90ECAIgGxEG4Ge2a0oj1w4FOQ1hLfwMRL6IVM0+SH G/o3rSPCCVek1lAdmt8Tlcsb/BImuNlSmqmMAfo0BkMfQAUaH3NUkEJH4HRByDNX CJMZXxTKouGCRvTuh/EcQbf85rJ8Ndm1OLiW+AtujxspJgRC -----END CERTIFICATE----- subject=CN=ace-d.jp issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M01 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: rsa_pss_rsae_sha256 Negotiated TLS1.3 group: X25519MLKEM768 --- SSL handshake has read 5414 bytes and written 1623 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Protocol: TLSv1.3 Server public key is 2048 bit This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
ace-d.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.