Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://ebisu-womens.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=ebisu-womens.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=ebisu-womens.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=ebisu-womens.jp
And you can
check your domain name
.
#
Certificate of
ebisu-womens.jp
{ "serial": "05A6AE61077AB906E8B8E57D4B521E0C", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "ebisu-womens.jp", "port": 443, "subjectAltName": "DNS:*.ebisu-womens.jp, DNS:ebisu-womens.jp", "is_valid": true, "CA": "DigiCert Inc", "updated_at": "2023/08/25 09:00:00", "expires_at": "2024/08/26 08:59:59", "today": "2024/04/28 05:17:13", "UTC": { "updated_at": "2023-08-25T00:00:00Z", "expires_at": "2024-08-25T23:59:59Z", "today": "2024-04-27T20:17:13Z" }, "remaining_days": 120 }
#
OCSP response of
ebisu-womens.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = *.ebisu-womens.jp i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 25 00:00:00 2023 GMT; NotAfter: Aug 25 23:59:59 2024 GMT 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 2 12:24:33 2017 GMT; NotAfter: Nov 2 12:24:33 2027 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIQBaauYQd6uQbouOV9S1IeDDANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx MB4XDTIzMDgyNTAwMDAwMFoXDTI0MDgyNTIzNTk1OVowHDEaMBgGA1UEAwwRKi5l YmlzdS13b21lbnMuanAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDM K9baoeKObTfHFiev/rBvdXKcvh3cHgUBmydVRR+MnFh3n/V507KY3VmcQ6vACkhu wDatUMnqSupTCOID0RVUrnz1Qg+fw4/46zLbtrcR9ca2tE7YQZsZUzXj+iOncDet b2f3jC6MuU4+rsW6j8Yx5JURipffeSLcJqucAeVOAxQCZgauqtmeScVV7t6q/6ku qwmqbeDMfvchM1pz751HP7PAUJvfec1ME6CG4HkNd/wukUbMdgWYu9V/C191A0TR ZeTUOUZwp5NruRy1NWc4G1b0kj4ORBvyULneudwg5fNjxkLesj0Fph5R7iWWkigP 9872QWgs5LaFz7oC6vcUdWn9NTMNlT/bOKM4/feYzWD1ESvwMAJk8o8wtV+G7nZk NnVCHFplwj+FnTkJmhcfLPRv5lMAm5B8Ozh7GDZCnTVk9/+VVMweWT4xCGSTPYqF JBEOzovW3veh7AVWiIB/NBfwxNwx3C90LUqu7TAixd31OSjo7e72rYVex/OSHDZA UJ7geUg6HMei6wXN4F8e2z1JlPMfA+Mu9mZeT/Ggp3LzHzqZ0TMSyC6XEmKK84lg dcUwBGbWKWq0OOQh75m29Xnm4D8tB25dqw+qaQWASK5Mbib6qFEHhLTqpZ9dhJLK 4fhKEjp7BEd28sDiSbaITTrlLBkv0nYJTV6TGtwT5wIDAQABo4IDKTCCAyUwHwYD VR0jBBgwFoAUDNtsgkkPSmcKuBTuesRIUojrVjgwHQYDVR0OBBYEFO20CmBcaloy IMf1udGBt3lglzlfMC0GA1UdEQQmMCSCESouZWJpc3Utd29tZW5zLmpwgg9lYmlz dS13b21lbnMuanAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3Ns LmNvbS9SYXBpZFNTTFRMU1JTQUNBRzEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIB MCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB2Bggr BgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wu Y29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFw aWRTU0xUTFNSU0FDQUcxLmNydDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSC AW8EggFrAWkAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYoq TfnFAAAEAwBIMEYCIQC01TrU8vvp/ZA07xye8gEnMt8i+wwcNKzco/CLg+Q7XAIh AJWNDrpXZoe5sP2UqlgapkTyD70Y/EVoPx1WRPchD/a1AHcASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGKKk35rwAABAMASDBGAiEA/pg0F3j2UkGE sDoreFMaLfycktrBfqBQhHB4anvMfO8CIQDHSsjGbMXKJpUge+VHfi7ln2zgwX3b IeiAO1affP28TwB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB iipN+XkAAAQDAEYwRAIgX4+agLzZ/ErRbe4KgcHrN/CEEvz2ZaGApTeoghlUVwUC IAhSnwEQxKU6Z3Agz4HzXvHggisj7tKYg90CBBu7A/SLMA0GCSqGSIb3DQEBCwUA A4IBAQAvsQAscmRLPd3bs7iEHnHPhsER08Y/7g4SL51BTH8jVtiml9b+MMeEjQPg QkDtcBSzP5GfZapzdwWVFnQN/pgnlf3u2jbdU7Fw69/XE+Iv3u2OIOHXKLUkIvkQ gFzR5NwLHowPaH9SuY/M/+crUmNvLyEHFEQ8xIKgwUKZA4mZ9nazmAIYxBJttAiP oHygNzu3j0GodPqedY/2MPOXZHmPx07DUyOfSAmhWdEUj5qd3AfykgrYey0YdZu5 ynOZifp3XtQF1ZHIzIvhqPX7o4tbYEvg7xRTP4j8IOlO0SWFc2q3NbAqS1+Nux8U 32VaENunIT/M4ue8lf41bMBtvXRW -----END CERTIFICATE----- subject=CN = *.ebisu-womens.jp issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 --- No client certificate CA names sent Peer signing digest: SHA512 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4013 bytes and written 452 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 1B37B3B690822DDBDEB41A332C5A0089509A78BB88BC3BAC0B1C7FF02A294FBC Session-ID-ctx: Master-Key: E291FF6E44ECCE232A26A38481CCB076A56936B13247B5A1E7D3572763DC89A3A31B40E57A5466AB8A58028D9620657C PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - 23 df 31 dd 55 6e 1c e6-8f a9 f8 2e 8f a0 2f f1 #.1.Un......../. 0010 - c6 2d 5a 2e 0c ab 1d 9c-3d 26 e7 c6 89 d0 6b bf .-Z.....=&....k. 0020 - bd 38 41 d0 e5 72 b6 dd-8a 21 df c2 fb f5 43 07 .8A..r...!....C. 0030 - c3 47 18 fa fc eb 24 df-d4 78 82 10 6c 64 9b 1a .G....$..x..ld.. 0040 - d7 e0 97 91 20 b4 a2 3b-38 84 15 3b 20 11 86 a8 .... ..;8..; ... 0050 - f8 7f 52 97 b6 ce 0b 00-99 7e 7b 0f 5a ab f5 2a ..R......~{.Z..* 0060 - ac 7f 21 da de 1b d4 be-3d bd 27 84 63 50 4f 25 ..!.....=.'.cPO% 0070 - 72 35 3d 85 72 74 87 63-a0 49 4a da 73 19 11 af r5=.rt.c.IJ.s... 0080 - af d9 00 0f fe 0e 4e 35-9f d8 7a 0f 54 6f ed cb ......N5..z.To.. 0090 - 87 c5 6f 70 f4 aa 0e b4-7e a7 14 03 a7 e0 23 66 ..op....~.....#f 00a0 - 2f e6 ba 5b 43 e1 42 b9-f0 48 88 41 1b 30 39 fd /..[C.B..H.A.09. 00b0 - 02 4d 9e 5c 3e 67 42 98-b1 c9 dc 6f 89 de 49 a7 .M.\>gB....o..I. 00c0 - 5a c4 91 aa 0a cb 61 d4-45 b5 78 80 5e 9a 3c 81 Z.....a.E.x.^.<. Start Time: 1714249034 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no ---
#
OCSP response of
ebisu-womens.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.