Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://labelmanagement-tower.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=labelmanagement-tower.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=labelmanagement-tower.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=labelmanagement-tower.jp
And you can
check your domain name
.
#
Certificate of
labelmanagement-tower.jp
{ "serial": "03D08B16829C3ED72C67ADB1F5AACF8D", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "labelmanagement-tower.jp", "port": 443, "subjectAltName": "DNS:labelmanagement-tower.jp, DNS:www.labelmanagement-tower.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2023/12/17 09:00:00", "expires_at": "2025/01/16 08:59:59", "today": "2024/04/29 02:41:18", "UTC": { "updated_at": "2023-12-17T00:00:00Z", "expires_at": "2025-01-15T23:59:59Z", "today": "2024-04-28T17:41:18Z" }, "remaining_days": 262 }
#
OCSP response of
labelmanagement-tower.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = labelmanagement-tower.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M02 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Dec 17 00:00:00 2023 GMT; NotAfter: Jan 15 23:59:59 2025 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M02 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:25:30 2022 GMT; NotAfter: Aug 23 22:25:30 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT 3 s:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 i:C = US, O = "Starfield Technologies, Inc.", OU = Starfield Class 2 Certification Authority a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 2 00:00:00 2009 GMT; NotAfter: Jun 28 17:39:16 2034 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIQA9CLFoKcPtcsZ62x9arPjTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIxNzAwMDAwMFoXDTI1MDExNTIzNTk1OVowIzEh MB8GA1UEAxMYbGFiZWxtYW5hZ2VtZW50LXRvd2VyLmpwMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA17lIN2/EZUx5RALkF4HWaOFxkAZEyvZz1pmfIogk b2fCPqjIOzWqMPLx4/1SqGrEDYbgUdguIVwnB6zSuP2mKcybzB75DZzEwZ572pxX oJ10prNOHit7B50NBhhOA1SN7thYbp7XQKfZRWKU7BrSEO8Jgu8+upMSRi3c0idQ Wg3dC5BB/dUihgu9sPlzfzL1ZERELlU6Q6S/9Q6xElLf6wTYEILFVNHT+uQKHNSM IghkkpXXKgX1cmUdAusf+U5RXCbck9U2cJjVWDA6pTA8mn9HjdBgp18mSXKOWd7y MmCw2CPj/1f9hy2/IVgwgalML6gLbzl5gm0EShPnO7Je3wIDAQABo4IDDzCCAwsw HwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFNoH7zrw bKafQoySBmzTzlPTxfZ/MEEGA1UdEQQ6MDiCGGxhYmVsbWFuYWdlbWVudC10b3dl ci5qcIIcd3d3LmxhYmVsbWFuYWdlbWVudC10b3dlci5qcDATBgNVHSAEDDAKMAgG BmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9u dHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG IWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq aHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1Ud EwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AE51oydcmhDDOFts 1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjHVB/S4AAAQDAEgwRgIhALZ2OfGXgsiy Qy3/H0z7NIn6sb8qTeyQRLNWjnIbZgiYAiEAyHh4/0YTLqQ4nEifNfdKV8x9dONM Xquwjg3KePSC1qUAdQA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAA AYx1Qf0ZAAAEAwBGMEQCICJuzCjEATTloqBJCOFFoUHqBYRwLNUoxLpS0gKGuUCf AiAckwTMQXWxU693IZDH0rplk00uJEwEjwWnMPWmZiU9ZwB2AH1ZHhLheCp7HGFn fF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjHVB/QUAAAQDAEcwRQIgW0MZiBYKnItx QgINXzcEkhO5OACumOyYEt6lq8DZcjMCIQCY/mdlSfZCDya1wf2E3/KUGXoWIFJs gRcuO3cm0X97LjANBgkqhkiG9w0BAQsFAAOCAQEAXgvIspRUVBQY0GnDzO75z6iA w/5WSu+YgAF0Tp4OCW5UQg2EQrNZu5gBPP9T0g+V71PaOxPvOSHDk4J2kHYNJ/k8 Axwy1ZEh/uDTyx6cQzJEuaSKOOIEsQFOTN0xv+BLpaVPNJYGQppNX2FuQTQi81uY dxFfOkIwaNGAPu7rV4XLm4MTw6cMSrD45/CV7h9riYjntTeHVPY4VRNolFBYgZGD fV0Gmwtmaa4I3Dy+vw2AwXcm4nw2QgTMudYWGQag1xEyvZkNfZJrKpk5jk/D/v9l TzakMk5s1UaMBszFlvRsbMbX1jeUlYCa4vpo3fEw+k1Jw26hIRiX8FFGyhsgig== -----END CERTIFICATE----- subject=CN = labelmanagement-tower.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M02 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 5621 bytes and written 461 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 210D5B5E5A706C90B8106A56CB00663D88BA1014336449491BE170BAA398C8E3 Session-ID-ctx: Master-Key: 8C550B8D1ADF787D1A82B546D04DBDA695A8C09AB7735AA4318844BEB6E16301653864AD1BBA1B754410597E36F3104D PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 08 a6 c5 ce 61 38 e3 ca-39 e5 d5 32 55 58 aa 6a ....a8..9..2UX.j 0010 - f8 ae e4 79 a5 c7 18 d1-58 7c a4 74 74 50 b8 1d ...y....X|.ttP.. 0020 - 3a 45 74 01 8a 84 2e 9a-c6 d5 fd 2f 83 01 31 5a :Et......../..1Z 0030 - 9d aa 1d 6e ca 09 09 16-89 78 c5 d8 2d 89 dd 30 ...n.....x..-..0 0040 - 29 bf 70 0b f7 46 bb bf-67 3f 33 dc b3 64 fd 87 ).p..F..g?3..d.. 0050 - 5f da 3e 1f 6a 33 91 ce-99 9c 1f e4 73 55 d3 ad _.>.j3......sU.. 0060 - d2 70 be 89 d2 8f 35 1b-0d .p....5.. Start Time: 1714326078 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
labelmanagement-tower.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.