Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://api.shokujin.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=api.shokujin.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=api.shokujin.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=api.shokujin.jp
And you can
check your domain name
.
#
Certificate of
api.shokujin.jp
{ "serial": "19C4E60F1C14F95F2E8DB4E5312A2628", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "api.shokujin.jp", "port": 443, "subjectAltName": "DNS:api.shokujin.jp", "is_valid": true, "CA": "SSL Corporation", "updated_at": "2026/09/18 18:46:32", "expires_at": "2026/12/17 17:47:56", "today": "2026/09/28 09:49:39", "UTC": { "updated_at": "2026-09-18T09:46:32Z", "expires_at": "2026-12-17T08:47:56Z", "today": "2026-09-28T00:49:39Z" }, "remaining_days": 80 }
#
OCSP response of
api.shokujin.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN=api.shokujin.jp i:C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 4 a:PKEY: EC, (prime256v1); sigalg: ecdsa-with-SHA256 v:NotBefore: Sep 18 09:46:32 2026 GMT; NotAfter: Dec 17 08:47:56 2026 GMT 1 s:C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 4 i:C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2 a:PKEY: EC, (prime256v1); sigalg: ecdsa-with-SHA384 v:NotBefore: May 29 19:50:15 2025 GMT; NotAfter: May 27 19:50:14 2035 GMT 2 s:C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2 i:C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022 a:PKEY: EC, (secp384r1); sigalg: ecdsa-with-SHA384 v:NotBefore: Oct 21 17:02:23 2022 GMT; NotAfter: Oct 17 17:02:22 2037 GMT 3 s:C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022 i:C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services a:PKEY: EC, (secp384r1); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 1 00:00:00 2025 GMT; NotAfter: Dec 31 23:59:59 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIDvTCCA2OgAwIBAgIQGcTmDxwU+V8ujbTlMSomKDAKBggqhkjOPQQDAjBRMQsw CQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSgwJgYDVQQDDB9D bG91ZGZsYXJlIFRMUyBJc3N1aW5nIEVDQyBDQSA0MB4XDTI2MDkxODA5NDYzMloX DTI2MTIxNzA4NDc1NlowGjEYMBYGA1UEAwwPYXBpLnNob2t1amluLmpwMFkwEwYH KoZIzj0CAQYIKoZIzj0DAQcDQgAEhF75fUwQN75Mm83jyY5FCLCnuny7cR5BG9aC yK+P58tl+vEAgh1oJOQS+sIZyLIPuNcFhPhnTQv+TEh/0cRfQqOCAlIwggJOMAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUgg3OaJJ0vmRlfxjVsBZwDmq7gEgwSQYI KwYBBQUHAQEEPTA7MDkGCCsGAQUFBzAChi1odHRwOi8vaS5jZi1pLnNzbC5jb20v Q2xvdWRmbGFyZS1UTFMtSS1FNC5jZXIwGgYDVR0RBBMwEYIPYXBpLnNob2t1amlu LmpwMCMGA1UdIAQcMBowCAYGZ4EMAQIBMA4GDCsGAQQBgqkwAQMBATATBgNVHSUE DDAKBggrBgEFBQcDATBTBgNVHR8ETDBKMEigRqBEhkJodHRwOi8vYy5jZi1pLnNz bC5jb20vYjA0Mzg2NjJiNGRiZGFlN2Q3ZmFmZjczZDNmM2QzZTE5M2Q4YmNkMi5j cmwwDgYDVR0PAQH/BAQDAgeAMA8GCSsGAQQBgtpLLAQCBQAwggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdgCUTkOH+uzB74HzGSQmqBhlAcfTXzgCAT9yZ31VNy4Z2AAA AaCz8kSZAAAEAwBHMEUCIQDjWSTETBVOWB7yIfICBhjzHNgFS+Iv7FkLDZz22xH6 GQIgfJ8fJD8RmTqICaVfHSRB3BCxr3SVbfvwQ3W8sJreyt8AdgDLOPcViXyEoURf W8Hd+8lu8ppZzUcKaQWFsMsUwxRY5wAAAaCz8kSwAAAEAwBHMEUCIQCD70AEukuK JodkIeiwZaF6HtAGYAr09P3qkH/DffSnWAIgG/UZVxTPKljIy83brz+ZCY8cRYqj /Sx1RtofcArh0qswCgYIKoZIzj0EAwIDSAAwRQIgKPDWyU3K35NpXlqRr3e9xtyS xlj35tvC+eBafVHRNrwCIQC2ghBZec2vA9LXnpdvvk+3gyYcBx2WYn4N8HyOA0mc Xw== -----END CERTIFICATE----- subject=CN=api.shokujin.jp issuer=C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 4 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ecdsa_secp256r1_sha256 Negotiated TLS1.3 group: X25519MLKEM768 --- SSL handshake has read 5030 bytes and written 1646 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Protocol: TLSv1.3 Server public key is 256 bit This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
api.shokujin.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.