Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://hyggefamily.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=hyggefamily.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=hyggefamily.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=hyggefamily.jp
And you can
check your domain name
.
#
Certificate of
hyggefamily.jp
{ "serial": "737607D615C980BC0E97206D7C75D1A9", "OCSP_serial": "737607D615C980BC0E97206D7C75D1A9", "OCSP_cert_status": "good", "OCSP_this_update": "Apr 23 15:46:14 2024 GMT", "OCSP_next_update": "Apr 30 14:46:13 2024 GMT", "domainName": "hyggefamily.jp", "port": 443, "subjectAltName": "DNS:hyggefamily.jp, DNS:*.hyggefamily.jp", "is_valid": true, "CA": "Google Trust Services LLC", "updated_at": "2024/03/19 20:05:02", "expires_at": "2024/06/17 20:05:01", "today": "2024/04/28 23:23:03", "UTC": { "updated_at": "2024-03-19T11:05:02Z", "expires_at": "2024-06-17T11:05:01Z", "today": "2024-04-28T14:23:03Z" }, "remaining_days": 49 }
#
OCSP response of
hyggefamily.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: D5FC9E0DDF1ECADD0897976E2BC55FC52BF5ECB8 Produced At: Apr 23 15:46:14 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: EC4A2797F8915935139678B3E8C8A21D097B312E Issuer Key Hash: D5FC9E0DDF1ECADD0897976E2BC55FC52BF5ECB8 Serial Number: 737607D615C980BC0E97206D7C75D1A9 Cert Status: good This Update: Apr 23 15:46:14 2024 GMT Next Update: Apr 30 14:46:13 2024 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 4e:d5:d5:ad:c2:ae:6e:fb:b2:49:b0:cd:b8:9a:33:7b:a0:e7: 35:42:df:01:ff:d0:4f:31:35:e6:d9:d2:9e:68:a4:e4:ba:27: 87:d4:12:b0:b4:20:98:a8:f5:38:87:97:f4:c1:39:3d:d9:56: 04:27:7c:c6:f3:26:d6:cd:f7:88:d2:c0:73:4c:95:4c:23:c2: f0:1e:82:d7:8c:ff:93:be:e3:7d:0a:cd:34:54:8d:2c:9a:f9: c4:45:b3:cd:55:a9:ba:20:2e:21:e2:7b:68:3b:99:9c:13:51: 2a:d8:58:e3:f2:8c:ec:74:b0:ab:54:e3:b7:89:12:56:98:7c: 4e:8e:90:91:39:36:c2:78:a6:8a:de:5e:c4:b0:06:ca:7c:ea: 99:b8:a3:73:9d:0e:fd:80:98:7b:1f:23:16:4a:0a:74:a0:32: dc:60:25:e6:06:96:e2:41:89:2a:6e:8b:50:0f:25:4f:01:c4: bd:8b:70:26:91:a7:65:d8:f4:75:a8:a2:42:fa:e0:c0:d7:85: 51:2b:2d:fb:a9:9f:e0:4d:4c:a0:11:89:ce:2e:8b:1f:66:a5: 40:62:35:59:92:9d:13:69:ed:36:a1:d2:19:30:d5:af:cf:1d: e7:8c:89:13:3a:6c:fa:26:ac:7f:ef:b7:08:88:9c:11:9b:96: 84:a3:a8:aa ====================================== --- Certificate chain 0 s:CN = hyggefamily.jp i:C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Mar 19 11:05:02 2024 GMT; NotAfter: Jun 17 11:05:01 2024 GMT 1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 i:C = US, O = Google Trust Services LLC, CN = GTS Root R1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 13 00:00:42 2020 GMT; NotAfter: Sep 30 00:00:42 2027 GMT 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256 v:NotBefore: Jun 19 00:00:42 2020 GMT; NotAfter: Jan 28 00:00:42 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQc3YH1hXJgLwOlyBtfHXRqTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDAzMTkxMTA1MDJaFw0yNDA2MTcx MTA1MDFaMBkxFzAVBgNVBAMTDmh5Z2dlZmFtaWx5LmpwMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAo9me30NzEiyqL2U0OPOQoIdrrr1TMrFMm+sPxM1N +plV707b+YbGtPDkeXW8tFF48WTSmKk47skVgcIC8SqUcLYjQCEnWHLqIkRV2847 sB64QyVSj/v3uqSEtOuskXgRKpMfaMKuyp2u1pesTcul/nlgd4L7pWaBOOVtnMSM 1ZylajMD8i8a5VxRwAZMh/wI4tfG1scBFnzoKscgjV/Sp2Et4YrCawyg8PvNua9d xCGs54/CkSgSsInnKs1OzQxJyyeZVl6lqz9pNY11UD4DifVp8IiN9vN3JXrfp7Zt 6Jw0kJDM8rslQB/b0FJwq/QKVc9DxWrSxKY0dXMGkCaqlQIDAQABo4IChzCCAoMw DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFHSDYv5rYl8LgWhrlnE0H5vDVNJgMB8GA1UdIwQYMBaAFNX8 ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvV3h6b0F6dUJNNncwMQYIKwYB BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwKwYD VR0RBCQwIoIOaHlnZ2VmYW1pbHkuanCCECouaHlnZ2VmYW1pbHkuanAwIQYDVR0g BBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6Athito dHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvYWt4LTlDaWNDbzAuY3JsMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9 MEjX+6sAAAGOVpnIMAAABAMARzBFAiBl3szhezPJi2fnJTZhW7J2H21qZWNPLfNF +oV9egE1UgIhAN7almbAvidOFa5IhmdP8mF1b7O/mW6u5eKZyS9dcHiTAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOVpnH/AAABAMARzBFAiB2 TqK8i6bMHyP+XYXU4Azu249o15eKsnCMmPt43oDz6AIhAPrjlFIhdjBse4b8Wd7j qY/SYLfxwwfypQ/re++x9HqiMA0GCSqGSIb3DQEBCwUAA4IBAQAYB85upfHd2bqR Q4UWnZv2bqvUSby4Qf33jafXEEwN83sJki6LOhwC7p1TxCz29c2j3U3sk05xrmU0 l9DliiKN8yBEaYJCAkbtDKj8/uMjaEzY4YSNbg7AnJln7XrBMiwxaU8wH9h+wpTn 7tiQ2kHRZH+myS+Yp6OTBgvPrJfIVnghJnFJ6uwW3Aq8tbJzWW3EvG/Uw+VG9DtH jojIXQj2wT24VV0kRwkEejbsIEJChKvIEaboryidW091kT2J9WYlursFdLjT3rdc x5StPpF0E3o0CHx58YGRSwgplfJKScdYf+4Tz5A+IIBCgHi6RUru/Ki3NydRISSJ 1Es1AFd6 -----END CERTIFICATE----- subject=CN = hyggefamily.jp issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 5187 bytes and written 405 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
hyggefamily.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.