Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://kepura.com
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=kepura.com
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=kepura.com
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=kepura.com
And you can
check your domain name
.
#
Certificate of
kepura.com
{ "serial": "0EB12C54D712CBEC72074934D8F8FAE1", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "kepura.com", "port": 443, "subjectAltName": "DNS:*.kepura.com, DNS:kepura.com", "is_valid": true, "CA": "Amazon", "updated_at": "2026/02/13 09:00:00", "expires_at": "2027/03/15 08:59:59", "today": "2026/09/28 20:40:23", "UTC": { "updated_at": "2026-02-13T00:00:00Z", "expires_at": "2027-03-14T23:59:59Z", "today": "2026-09-28T11:40:23Z" }, "remaining_days": 167 }
#
OCSP response of
kepura.com
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN=*.kepura.com i:C=US, O=Amazon, CN=Amazon RSA 2048 M01 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Feb 13 00:00:00 2026 GMT; NotAfter: Mar 14 23:59:59 2027 GMT 1 s:C=US, O=Amazon, CN=Amazon RSA 2048 M01 i:C=US, O=Amazon, CN=Amazon Root CA 1 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 23 22:21:28 2022 GMT; NotAfter: Aug 23 22:21:28 2030 GMT 2 s:C=US, O=Amazon, CN=Amazon Root CA 1 i:C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIQDrEsVNcSy+xyB0k02Pj64TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTI2MDIxMzAwMDAwMFoXDTI3MDMxNDIzNTk1OVowFzEV MBMGA1UEAwwMKi5rZXB1cmEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwn2m+iye2KBS2BBtL1jE8N1iCA8Xwr3JxuHRF0izDUdqvhgo2NNyUZk8 4G50Oy7OqJzQ518iVkVGIKzUkUwsSFTZGoAbpg/ltyYPju4wyHRiixjnnZMEXjZk lowsqqPJYTUqNfKYL+28pC/67m11YQ5dAMyIIiBhQUrs+29tXSkUXCtJZWWKnZ+n PdEo6o7z6ryvQMCNTMN4mbY+r99FNMPbydGSceeTttG6V4sFozb3iGMkA9i7H/6a kz+vwegp+fmQ6j84okD9QXxhW5FUcU7BYK6cN7Kv/Kq9Kh7A/co53aIacBHsEvWo moBOxknZzsQz7eo62Syem9ncdN+YCwIDAQABo4IC7jCCAuowHwYDVR0jBBgwFoAU gbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFOOvh1K97RwRJQdlizWlnblt 7Wu6MCMGA1UdEQQcMBqCDCoua2VwdXJhLmNvbYIKa2VwdXJhLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVz dC5jb20vcjJtMDEuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/ BAIwADCCAYUGCisGAQQB1nkCBAIEggF1BIIBcQFvAHUATGPcmOWcHauI9h6KPd6u j6tEozd7X5uUw/uhnPzBviYAAAGcVGU4HAAABAMARjBEAiBUNk3fClSqWdxNhcsd +pqrJe4UqgnuAZ9yVGh85Fp21QIgEhTfX3ADmfgn8i9CpdjPK/FgTeAsRZoQTqn4 WpS7uiMAdgAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9ZnwAAAZxUZTg6 AAAEAwBHMEUCIHWdb2gxS7PJmccU5/5Y4vQVraS6wQRi1ZCt4HcIJvT4AiEA/yDk N+s4gVAPntyb1Ztv5y/F8sab+Udy4Y+m9e4lfngAfgCOykcLrN5q86IGsKR6hLdG /h/Gv5U+JeabTuQCSPPG6AAAAZxUZTjNAAgAAAUAAqmTNwQDAEcwRQIgVBC1Ev4g MQUeDgxwkatSeuHpdziW/nJXdDxSHi4K6ZgCIQDA86gI1VHv2/YtU5tpGeoKjRmw xshmVxpa6cfDMDTj8zANBgkqhkiG9w0BAQsFAAOCAQEAov9pVc5EPlwYMcbAOZLj cCUyd0NHI8BtW42CLSbSqV+f60wYyynWJegqTnHyfW9dQGekh9KQNlILwl0uDYGC waJZQ4nOJl/4diLxkpsE2zFuaFTBrSIIrcW3sO2Nj/sz9hai40iaRRv4Ej4QkVtv FMKQjWQOtdl9wDWmZsfXNvLcYDUTyZfgd8Zit85IWuf55D5yc5FY/Z+X1VQSzoq5 vyd8SbphiErDHHoh1LrVRbIxfjsuEbs5Tc8rohjTK/64aNGbLHuQbWHZ4cW2WmvR MPjsXjkY/0GOna+79EP4nAmI6+qRCtuydc7W84wxJiKaZIKuaH/HFvEkli2BYETt +Q== -----END CERTIFICATE----- subject=CN=*.kepura.com issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M01 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: rsa_pkcs1_sha256 Peer Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4461 bytes and written 1687 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Protocol: TLSv1.2 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: F5B00325774235EB504196D4F4CA0E0220CEE7387B7F718CE95FF70C19CF6F16 Session-ID-ctx: Master-Key: BFFB9B21BA8A4789B9CC0A567A39252DB829CD9F2823DB5448CC5AD8E5C13C93F8AFFFD766A57CA9907DF240B17940B2 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 85843 (seconds) TLS session ticket: 0000 - 01 20 a4 7e 2e 99 d5 f2-b0 e8 3f c0 7f e6 47 04 . .~......?...G. 0010 - 79 39 c3 41 bb 2b 3f fe-31 90 7b 2b ea 70 b6 bb y9.A.+?.1.{+.p.. 0020 - 21 dd 03 e7 e0 e6 0b c9-56 7a 89 29 88 fc ce 62 !.......Vz.)...b 0030 - ab e2 21 fd ab 0f 68 73-87 ff 1d 89 47 a4 07 fe ..!...hs....G... 0040 - 10 1b 2f de d9 aa 86 cc-1e 9f 53 c1 ec 07 88 32 ../.......S....2 0050 - b5 52 c9 91 33 ab e8 84-69 17 04 57 bf f4 9e e2 .R..3...i..W.... 0060 - 63 dc 36 8b fa b7 d0 7e-ed 1e 48 e0 43 2d f9 d8 c.6....~..H.C-.. 0070 - a3 d4 90 a5 b6 7c 61 cf-12 f2 f5 bb e9 30 10 5a .....|a......0.Z 0080 - 8a 6a 42 fd d5 33 92 d7-98 5e .jB..3...^ Start Time: 1790595624 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
kepura.com
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.