Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://ltta.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=ltta.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=ltta.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=ltta.jp
And you can
check your domain name
.
#
Certificate of
ltta.jp
{ "serial": "013E763D639FD6049B4BC9981F0B337F", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "ltta.jp", "port": 443, "subjectAltName": "DNS:ltta.jp, DNS:fukui.ltta.jp, DNS:fukushima.ltta.jp, DNS:tochigi.ltta.jp, DNS:kyoto.ltta.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2025/05/02 09:00:00", "expires_at": "2026/06/02 08:59:59", "today": "2025/05/09 16:36:23", "UTC": { "updated_at": "2025-05-02T00:00:00Z", "expires_at": "2026-06-01T23:59:59Z", "today": "2025-05-09T07:36:23Z" }, "remaining_days": 388 }
#
OCSP response of
ltta.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: 1F5292615682547F8166D81D3D0AAA325C87DD08 Produced At: May 8 06:19:51 2025 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: E286E16FA66143C3984E708A7DD7C266E41DC242 Issuer Key Hash: 1F5292615682547F8166D81D3D0AAA325C87DD08 Serial Number: 013E763D639FD6049B4BC9981F0B337F Cert Status: good This Update: May 8 06:03:02 2025 GMT Next Update: May 15 05:03:02 2025 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 57:e9:43:f0:29:e4:29:b3:a6:f9:7f:ea:80:99:69:ca:9e:23: 48:c0:6a:7a:5b:75:54:82:9a:f1:25:bb:11:b3:63:91:24:19: 65:44:e4:11:52:4f:b9:15:10:f8:9f:b4:dd:b2:b7:a0:3b:90: fa:32:46:36:38:99:c5:67:11:e9:52:fa:09:41:9f:99:d9:5e: fb:70:89:64:97:04:e8:82:76:30:3d:14:e7:59:9a:e3:63:01: a4:8d:d4:36:a6:3a:e4:48:ca:ed:99:80:c5:23:1f:bd:97:c5: f3:2f:27:ce:08:06:e7:78:1a:89:86:42:d4:70:4e:ea:6f:b4: 2f:a9:b8:42:d8:e6:37:8d:93:fb:68:98:91:79:9a:c2:5f:c2: b4:ec:05:e7:c3:8c:33:f3:d6:88:96:c8:41:bc:d4:c9:e9:e7: 81:01:24:ff:ec:01:b5:3b:88:89:9b:c5:e4:ac:4f:82:ce:ba: 16:4e:e3:05:ce:f9:a7:c7:5d:95:bd:71:30:6a:9c:47:48:c1: f3:9b:d4:bf:a2:de:c5:84:b0:67:6d:62:39:37:66:6e:a3:35: 4f:f6:00:ab:70:09:81:40:48:6f:ec:03:dd:78:7b:0f:13:18: 57:8c:46:c9:44:18:46:db:6f:04:1d:50:4f:0e:26:6a:b1:41: 1c:33:76:37 ====================================== --- Certificate chain 0 s:CN = ltta.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M04 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 2 00:00:00 2025 GMT; NotAfter: Jun 1 23:59:59 2026 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M04 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:26:35 2022 GMT; NotAfter: Aug 23 22:26:35 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIQAT52PWOf1gSbS8mYHwszfzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTA0MB4XDTI1MDUwMjAwMDAwMFoXDTI2MDYwMTIzNTk1OVowEjEQ MA4GA1UEAxMHbHR0YS5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOKblwtzn6IFuhKVktHtaTr40++aTvHr0ufbKQ1mBRpVezP+gzGoWy6oQXpNBw0W /hzbAxAkF8yNNYrWbNbLMeHXcG+M7rm2BwLVJZ59as4xt83y9tOkp1I+D7yLOQj7 fpbxcsD0jJqtIYbvXvjlB4X9l2dvyjdpKvQxytyxvk9uGxDl5N0PoFz3kL0EXwYV 31e/3tfK5BDVn8tYGym5GhUIDqRTOuOIgCr6s22hAttZX9PpWvpQecH48m6DZJEN Ny4LMkgrNQFq950sbhTaxuMs2GwOPiIJGBW4kTVa51jyDefeUt3I2W5foHC1Ef9C RKW4EQ9pIMZE/eNwQ+bZMXsCAwEAAaOCAyAwggMcMB8GA1UdIwQYMBaAFB9SkmFW glR/gWbYHT0KqjJch90IMB0GA1UdDgQWBBSpfFfBim58pOYwd6eURQZdTiZmUTBU BgNVHREETTBLggdsdHRhLmpwgg1mdWt1aS5sdHRhLmpwghFmdWt1c2hpbWEubHR0 YS5qcIIPdG9jaGlnaS5sdHRhLmpwgg1reW90by5sdHRhLmpwMBMGA1UdIAQMMAow CAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wNC5hbWF6 b250cnVzdC5jb20vcjJtMDQuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AucjJtMDQuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnIybTA0LmFtYXpvbnRydXN0LmNvbS9yMm0wNC5jZXIwDAYD VR0TAQH/BAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUADleUvPOuqT4z GyyZB7P3kN+bwj1xMiXdIaklrGHFTiEAAAGWjx55XQAABAMARjBEAiBYSL2XOcIG rrg+fQYxbrmdZDXmyehPGk9TT7SkeZlG9QIgMchd44S4H7kUFsLQt4kobLOB6rzp EPol3Wwt1KelmDYAdQBkEcRspBLsp4kcogIuALyrTygH1B41J6vq/tUDyX3N8AAA AZaPHnmPAAAEAwBGMEQCICW+HLXXaKe1hUtoaH2BbjTURoOZYpDvEy6Xvk19Dv2W AiAIBNqzQm99qa0iFozsi6WJ6lhfDw/ktqgzC50u2u8ERQB2AEmcm2neHXzs/Dbe zYdkprhbrwqHgBnRVVL76esp3fjDAAABlo8eeaQAAAQDAEcwRQIhAPT/h1HWmzWu U/U/3N0Y/RdQCDZ1vzILtlmaiVLuQ/JGAiA+HcRp2sYrg3yLD5gu3PMHrBYZvTtb B+UYj4eyI+0f+TANBgkqhkiG9w0BAQsFAAOCAQEAAUDW3wZPzbfDTxHqQRF8a511 ECbx+5iqPleCkN9nVYTJEsHsZYdH7szg+cdqp4mTBDyLuOXE1JPUwxU2Vjx51A3U 1eHgcOV3XJo1qfvyJdMUYrkLr5L85wTe6w+yo10bDqePkKnBe14HfIwrX1SMq4ho 0N4zTeHZgJYA+eDQEeKcAxOlQExTLwVh26uVnSUrkaGgSD4gI4k9ElkqyqIk5jcP QsWlaDnON5DMDvXFcB3wxy8Ypp4hSt7kSblskS4ISe09runQg1sn+lQ9sUdQmOva /FERFI0ZVXoS+kkCEnzdF2p6obKweDxOEVFRVXV86kUsJf99HcSTKR+18L1hvg== -----END CERTIFICATE----- subject=CN = ltta.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M04 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 4863 bytes and written 382 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
ltta.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.