Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://demo.axx.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=demo.axx.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=demo.axx.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=demo.axx.jp
And you can
check your domain name
.
#
Certificate of
demo.axx.jp
{ "serial": "83590E46076C8ECB1142FA521E9609B5", "OCSP_serial": "83590E46076C8ECB1142FA521E9609B5", "OCSP_cert_status": "good", "OCSP_this_update": "Mar 31 13:31:09 2026 GMT", "OCSP_next_update": "Apr 7 12:31:08 2026 GMT", "domainName": "demo.axx.jp", "port": 443, "subjectAltName": "DNS:axx.jp, DNS:*.axx.jp", "is_valid": true, "CA": "Google Trust Services", "updated_at": "2026/03/11 18:54:30", "expires_at": "2026/06/09 19:53:19", "today": "2026/04/01 10:29:26", "UTC": { "updated_at": "2026-03-11T09:54:30Z", "expires_at": "2026-06-09T10:53:19Z", "today": "2026-04-01T01:29:26Z" }, "remaining_days": 69 }
#
OCSP response of
demo.axx.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: 9077923567C4FFA8CCA9E67BD980797BCC93F938 Produced At: Mar 31 13:31:09 2026 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: B9BED5F1A61E40B24196B0C29E7E1A9D8BFCB520 Issuer Key Hash: 9077923567C4FFA8CCA9E67BD980797BCC93F938 Serial Number: 83590E46076C8ECB1142FA521E9609B5 Cert Status: good This Update: Mar 31 13:31:09 2026 GMT Next Update: Apr 7 12:31:08 2026 GMT Signature Algorithm: ecdsa-with-SHA256 Signature Value: 30:44:02:20:57:31:48:b9:3e:d4:1c:de:ee:01:bb:aa:a0:71: c6:8f:a6:3e:7b:58:09:5e:71:de:86:32:dd:37:c0:2d:32:bd: 02:20:06:dc:f2:c2:2d:eb:8c:08:8a:f3:b4:c8:e1:52:ac:91: 93:75:b4:04:b7:24:84:7c:e2:ff:8c:5f:91:e0:94:e1 ====================================== --- Certificate chain 0 s:CN = axx.jp i:C = US, O = Google Trust Services, CN = WE1 a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA256 v:NotBefore: Mar 11 09:54:30 2026 GMT; NotAfter: Jun 9 10:53:19 2026 GMT 1 s:C = US, O = Google Trust Services, CN = WE1 i:C = US, O = Google Trust Services LLC, CN = GTS Root R4 a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA384 v:NotBefore: Dec 13 09:00:00 2023 GMT; NotAfter: Feb 20 14:00:00 2029 GMT 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R4 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 15 03:43:21 2023 GMT; NotAfter: Jan 28 00:00:42 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIDljCCAzygAwIBAgIRAINZDkYHbI7LEUL6Uh6WCbUwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDMxMTA5NTQzMFoXDTI2MDYwOTEwNTMxOVowETEPMA0G A1UEAxMGYXh4LmpwMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdS1QCmTBbRJm Y7QSEP47jrWyM9+co9rbnzR/KuTHOlCxdD+zBX4PFNJLRclKWDLJ/YypbMZjKAzX bJ9PO7Jq8aOCAkkwggJFMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQz0QMjar26rbrAxZzjS6gL27Rt AzAfBgNVHSMEGDAWgBSQd5I1Z8T/qMyp5nvZgHl7zJP5ODBeBggrBgEFBQcBAQRS MFAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vLnBraS5nb29nL3Mvd2UxL2cxazAlBggr BgEFBQcwAoYZaHR0cDovL2kucGtpLmdvb2cvd2UxLmNydDAbBgNVHREEFDASggZh eHguanCCCCouYXh4LmpwMBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0w K6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dlMS83aWZSV2dRdm1PSS5jcmwwggEE BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCWl2S/VViXrfdDh2g3CEJ36fA61fak8zZu RqQ/D8qpxgAAAZzciLCWAAAEAwBHMEUCIDXBrFNYy2hYGaFGAhbXehn43fMX4ABQ /FQx+GDxJRjUAiEA9ydvsRQSPLIjxLBQYdoIdt5dIibdFVC6s//FujJdlr0AdgDL OPcViXyEoURfW8Hd+8lu8ppZzUcKaQWFsMsUwxRY5wAAAZzciLBcAAAEAwBHMEUC IQDI8TfDlsSIIHiYT0e10XEUzqsPAklFBvNW21GQQ6quuQIgOHqSzqAfBQNcdS/f Zb29pxmv2IjT/o9x7vK1TPxbipYwCgYIKoZIzj0EAwIDSAAwRQIgahDtqubsGpx8 8jhNGFipB/HpIjL9iYPK9X9QJHnX7VMCIQCBCy9Nu/FQDzJMxwfPjHmHj4kdYcn2 Ab7cW5fusBoTJg== -----END CERTIFICATE----- subject=CN = axx.jp issuer=C = US, O = Google Trust Services, CN = WE1 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits --- SSL handshake has read 3097 bytes and written 402 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
demo.axx.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.