Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://redash.alfos.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=redash.alfos.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=redash.alfos.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=redash.alfos.jp
And you can
check your domain name
.
#
Certificate of
redash.alfos.jp
{ "serial": "DEE8588731FAE1100AE40B76CE0AEF73", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "redash.alfos.jp", "port": 443, "subjectAltName": "DNS:redash.alfos.jp", "is_valid": true, "CA": "Google Trust Services", "updated_at": "2024/11/09 06:12:12", "expires_at": "2025/02/07 07:05:26", "today": "2024/11/21 15:59:14", "UTC": { "updated_at": "2024-11-08T21:12:12Z", "expires_at": "2025-02-06T22:05:26Z", "today": "2024-11-21T06:59:14Z" }, "remaining_days": 77 }
#
OCSP response of
redash.alfos.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = redash.alfos.jp i:C = US, O = Google Trust Services, CN = WR3 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 8 21:12:12 2024 GMT; NotAfter: Feb 6 22:05:26 2025 GMT 1 s:C = US, O = Google Trust Services, CN = WR3 i:C = US, O = Google Trust Services LLC, CN = GTS Root R1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Dec 13 09:00:00 2023 GMT; NotAfter: Feb 20 14:00:00 2029 GMT 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256 v:NotBefore: Jun 19 00:00:42 2020 GMT; NotAfter: Jan 28 00:00:42 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIRAN7oWIcx+uEQCuQLds4K73MwDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IzMB4XDTI0MTEwODIxMTIxMloXDTI1MDIwNjIyMDUyNlowGjEY MBYGA1UEAxMPcmVkYXNoLmFsZm9zLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAiGEAo+EgNyKU7JcXkEZD4vDdgSkwAb46SFl95qFgkxctUK1pkRqc 8K4IM5bHqims4N1ylRrunc/k4xLjorApDj+UMou6NpbbPyq8XcIoWSHQffzC7gFZ cH22GKiXk0MUB+j8FKMGn9w07QbUbQ0osr0r6HEv0lIwe6Flc3Kr0QmjCiB08dK9 bb+xKhAcHHSdnvumbEfWix+zJz7wp34iBAiVuRDqAY7pPh+BP3aZLMdqkLtvdAGZ v8lPVYWXO6JJcPv5JOwIudwlPEkQFKRtO4ofL/rJaVM617CmSUNUro4RHfAnAjeS 5pMywTWIjBjqj7oSi+U99B5eU+s1PQUpXwIDAQABo4ICSDCCAkQwDgYDVR0PAQH/ BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFB1fGZHE64Twl6PEskQgEhHF/Ud5MB8GA1UdIwQYMBaAFMeB9f2OiNkAPE1j olAxJKDOI/4jMF4GCCsGAQUFBwEBBFIwUDAnBggrBgEFBQcwAYYbaHR0cDovL28u cGtpLmdvb2cvcy93cjMvM3VnMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29v Zy93cjMuY3J0MBoGA1UdEQQTMBGCD3JlZGFzaC5hbGZvcy5qcDATBgNVHSAEDDAK MAgGBmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93 cjMvR2VFMmp0WGNodUkuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAzxFW 7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGTDdXB9gAABAMARzBFAiBL OCezZYabxwEohlmRTgfyBX9K7gBhezBYE9amI4td0QIhAINetARE6QRsENCmWFhd flUwCYaNMsucZ4ivMkfxrbQfAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/Z DowuebgAAAGTDdXB7AAABAMARzBFAiEA05vd4wzvz0S8UVa7K1kk5k+4I4uPRS2U AMV7ccIqp0MCIGZ63myKBGFvWo0Q/5MAck64137lFBsNSjVeLYLTlg06MA0GCSqG SIb3DQEBCwUAA4IBAQAcvYV9/zuXBwoRwDS1fK/XsRroeXLMB+G/33C2fAe+DUjD XXeL5r1cJrx2NZlGFdvSwnFglBsmHTYUj3fr3R7EsC2662Wb6Fvt889gxiV15hHe awkqdLg34Kg0PvtQQdRGRCsTkPrFSLosdj/T+/i2pE2BJdJ3RME1uvvEYvBRGN82 J1vqPO8ozRJAt6Md4cvJCBAPCQrOGKH7h7Gx6gDuUM9VDFXaAaKcqWhex1NBZ6Up 4G4QQ4mSkuhGsclWDQ+3m5yddSzHE/0AamuBYYd+KN/mbRujoXZyBxV5xIhge88A KkzqdtWHIwlQaNz+T/U0fmkjawwxO6jTaB57kOMs -----END CERTIFICATE----- subject=CN = redash.alfos.jp issuer=C = US, O = Google Trust Services, CN = WR3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 4503 bytes and written 406 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
redash.alfos.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.