Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://kyoto.ltta.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=kyoto.ltta.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=kyoto.ltta.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=kyoto.ltta.jp
And you can
check your domain name
.
#
Certificate of
kyoto.ltta.jp
{ "serial": "03C45357808B277D7E62BECA2FAF3047", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "kyoto.ltta.jp", "port": 443, "subjectAltName": "DNS:ltta.jp, DNS:fukui.ltta.jp, DNS:fukushima.ltta.jp, DNS:tochigi.ltta.jp, DNS:kyoto.ltta.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2026/09/03 09:00:00", "expires_at": "2027/03/20 08:59:59", "today": "2026/09/28 18:07:03", "UTC": { "updated_at": "2026-09-03T00:00:00Z", "expires_at": "2027-03-19T23:59:59Z", "today": "2026-09-28T09:07:03Z" }, "remaining_days": 172 }
#
OCSP response of
kyoto.ltta.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: 81B80E638A891218E5FA3B3B50959FE6E5901385 Produced At: Sep 27 04:25:01 2026 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: A17551059D2110D201B9081B73338F1C3CC7BD5F Issuer Key Hash: 81B80E638A891218E5FA3B3B50959FE6E5901385 Serial Number: 03C45357808B277D7E62BECA2FAF3047 Cert Status: good This Update: Sep 27 04:09:00 2026 GMT Next Update: Oct 4 03:09:00 2026 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: d3:12:a0:4b:d0:6a:31:8e:08:39:aa:62:c6:a6:0c:8f:ae:70: ef:bb:af:dc:d2:d6:ca:29:9d:ad:43:bd:03:df:e4:59:05:1e: 83:3b:2b:79:4d:18:57:54:52:bf:7c:a5:36:c6:d6:1d:cc:95: 34:7f:9a:bd:79:56:21:23:80:ef:ad:df:67:21:5d:3e:eb:97: 71:20:e9:b2:71:8c:c8:98:43:26:f7:f7:7a:dd:2b:f9:66:0b: ce:ac:ee:ce:41:fa:35:5e:4a:e3:c5:f4:2d:93:14:f7:e0:81: 33:0d:7b:b3:66:b6:e1:da:3d:65:cb:d1:13:a8:d2:85:5a:a2: 5b:7c:c6:11:16:7d:81:f9:a7:49:21:a4:d1:6f:78:fa:e2:89: 72:3d:92:14:cb:40:09:45:81:d1:ae:d4:69:b7:2e:a0:70:8f: f3:35:cb:56:56:e5:a3:7a:3a:a1:11:12:be:5d:2b:91:3f:93: d3:66:a7:9f:0b:99:80:c1:57:9f:bd:d4:e7:55:e5:4e:9f:3c: 49:02:f4:13:58:68:7b:df:2a:82:9d:c2:f2:29:02:64:a9:cd: 34:a2:21:e2:0e:30:46:69:63:26:d4:ea:04:4d:81:de:5c:ce: 37:ab:56:bf:20:46:45:6e:fc:10:30:0b:5e:8c:11:d8:4b:eb: 8a:02:f0:4b ====================================== --- Certificate chain 0 s:CN=ltta.jp i:C=US, O=Amazon, CN=Amazon RSA 2048 M01 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Sep 3 00:00:00 2026 GMT; NotAfter: Mar 19 23:59:59 2027 GMT 1 s:C=US, O=Amazon, CN=Amazon RSA 2048 M01 i:C=US, O=Amazon, CN=Amazon Root CA 1 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 23 22:21:28 2022 GMT; NotAfter: Aug 23 22:21:28 2030 GMT 2 s:C=US, O=Amazon, CN=Amazon Root CA 1 i:C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIQA8RTV4CLJ31+Yr7KL68wRzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTI2MDkwMzAwMDAwMFoXDTI3MDMxOTIzNTk1OVowEjEQ MA4GA1UEAxMHbHR0YS5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANNM6Zyxq0hW3GIRUbCxxVL9tdJRGFjxBcgp5TsrGFKdq7QRtp9B/qE8adn8xHes ivsE5aaVi+4A6lfnto3R978dBcdOZHqwoW6GGNZMU0viOMFFNFnF2mwJ1TKrP3hd FxzWQT1l+Xso9b3lMqoxVsumoh7Kw6lITlkHtJwR9q0b2pdyS0YouqC5ILDFTkf9 ej/y8SmzcrMDg8Pdq7gunqlw3LKtjgPPGDqBE78Lg02Wqy3kfsmt74KN0E1aIh3m VkK83Lg2YcHeJapscP3IRCSKEgbRC3aUf7gHBtD/1nYQJVZFv9+OJH7bdSWlVyU/ htqd6W+oFKnyfYAiumxrhHMCAwEAAaOCAx8wggMbMB8GA1UdIwQYMBaAFIG4DmOK iRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBSOaY9ELTpOl2rLEKbkFPmlQAki4DBU BgNVHREETTBLggdsdHRhLmpwgg1mdWt1aS5sdHRhLmpwghFmdWt1c2hpbWEubHR0 YS5qcIIPdG9jaGlnaS5sdHRhLmpwgg1reW90by5sdHRhLmpwMBMGA1UdIAQMMAow CAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNv bS9yMm0wMS5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAA MIIBhQYKKwYBBAHWeQIEAgSCAXUEggFxAW8AfgCOykcLrN5q86IGsKR6hLdG/h/G v5U+JeabTuQCSPPG6AAAAaBnhEbzAAgAAAUADFHIigQDAEcwRQIgEyrz99C28OJM FfEGoegd5Kue/85xYB0tgZ5ApBvyqF8CIQCQ+2HoS6MhWt7PF7Q7i7kG2JhodNhK FrJVUdQWZejc/wB2ANbVjanQF1Pzakqgx1dJAq/rx9ws04zZ92TIDIkZHp8CAAAB oGeERfcAAAQDAEcwRQIgL3hYnsPnvPjk/QG4X8C1TA+gwfOI1M+ZKYOCfMmfPZgC IQC74xcdtLm4EcHpfnLMe+kIAac3/2ku1QAh7PuiQSvxJgB1AETCvQzpFA5kpclK AZMKWqG7NZcOAO4RFoloKhxE17VmAAABoGeERkQAAAQDAEYwRAIgPKsB2ghQ2xEP BqzlrwRyhuxK/Bf8fDCPj7w1fFGpbmwCIDCn2YR2YGTVD9rAxpVsOQ72ZHhOhsRt LBRsIqPZrJSkMA0GCSqGSIb3DQEBCwUAA4IBAQAvRVt9bM+IL736kFr+0381eUvz gc5GSSF5vv53XLYmvUk9a/v4AsfsP/jWzs2wwtKzo4CtaSpcYUzykxGXMCAbW4ip fsamb/5OBJtVAlwmADPJ9nJGJT0A/zYZ+xffXXbFXQQx3RE0NJiMf7Y6s/+FiKYm 5J5fYD16pnJ4qQG6kzgkWpCXgMMTyMH/KLt7vZC8Bblz0SCUYoiqSatUHD42zNlM Rdv4Y71wBZ5mnT7TlnlrmV9czuFrRUurBm9gEyMOkOAyxY9vNUxG5etLeHsciXYi m7rgOaijees0/Hb19wE9k6Hg8cYpElB7966G5gsPuHUfhYtNNug0vV6i2TVY -----END CERTIFICATE----- subject=CN=ltta.jp issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M01 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: rsa_pss_rsae_sha256 Negotiated TLS1.3 group: X25519MLKEM768 --- SSL handshake has read 5950 bytes and written 1628 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Protocol: TLSv1.3 Server public key is 2048 bit This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
kyoto.ltta.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.