Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://skinvill.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=skinvill.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=skinvill.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=skinvill.jp
And you can
check your domain name
.
#
Certificate of
skinvill.jp
{ "serial": "3A420F1D6DD5F4F7B5F0B624FE027CED", "OCSP_serial": "3A420F1D6DD5F4F7B5F0B624FE027CED", "OCSP_cert_status": "good", "OCSP_this_update": "Oct 30 23:20:55 2025 GMT", "OCSP_next_update": "Nov 6 23:20:54 2025 GMT", "domainName": "skinvill.jp", "port": 443, "subjectAltName": "DNS:skinvill.jp, DNS:www.skinvill.jp", "is_valid": true, "CA": "CloudSecure Corporation", "updated_at": "2025/08/09 09:00:00", "expires_at": "2026/08/10 08:59:59", "today": "2025/11/02 23:46:02", "UTC": { "updated_at": "2025-08-09T00:00:00Z", "expires_at": "2026-08-09T23:59:59Z", "today": "2025-11-02T14:46:02Z" }, "remaining_days": 280 }
#
OCSP response of
skinvill.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: 0156138EEF274BD1AFF200295E1CCD730C557FC6 Produced At: Oct 30 23:20:55 2025 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: A1AB7FD036CD1F5F7BAEBD8EA05EC190BC807FBF Issuer Key Hash: 0156138EEF274BD1AFF200295E1CCD730C557FC6 Serial Number: 3A420F1D6DD5F4F7B5F0B624FE027CED Cert Status: good This Update: Oct 30 23:20:55 2025 GMT Next Update: Nov 6 23:20:54 2025 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 5c:8a:71:15:bb:43:54:9b:1c:69:1f:56:ab:b9:dc:59:75:5a: 02:40:97:52:ec:c3:36:58:63:3f:8c:5e:5a:4f:8c:21:9d:f4: f9:85:8d:0f:b0:cb:6a:5d:1e:83:52:88:69:44:d8:e8:e7:0a: 0c:dc:3c:98:7b:2e:ee:f9:53:b3:dc:37:14:82:b2:45:c3:7c: c1:d9:6a:d3:a6:7b:e3:12:25:50:48:e6:50:a2:44:19:9a:e9: dc:9c:65:6f:5a:50:0c:8c:75:7c:a1:d1:f2:e1:58:e1:8b:fe: 2a:ff:33:4c:36:02:b5:85:21:ab:e7:8f:23:54:e4:a0:7d:26: bd:96:58:50:5c:2e:17:4b:fe:53:74:20:7f:e1:19:7b:6c:d3: fd:cf:d4:e8:4c:63:89:ab:ca:d7:94:79:4d:ab:b4:ae:62:4d: 6f:83:f2:51:bf:7c:42:7b:ac:92:dd:b0:55:a1:25:25:ea:6e: fd:e4:51:74:92:f4:df:9a:c3:e0:b0:fa:d1:60:a9:c7:35:c6: 9a:a0:ae:3f:ac:30:75:cb:a4:52:2e:4f:3e:6e:1c:b4:05:53: 97:d8:c0:e1:2a:af:be:eb:79:23:57:f3:0e:be:2c:c7:ad:37: 0d:f3:2b:9b:27:7b:fd:74:38:b2:79:93:bb:92:dd:8c:4e:0a: 82:1f:67:02:77:50:58:ca:80:3c:6b:fe:02:22:9c:e7:91:7f: 72:9b:b7:70:7e:0b:84:73:f0:4a:d8:87:17:c7:30:6e:69:60: 3c:9f:b5:6e:07:d6:f7:e9:11:56:06:ac:d7:6f:da:dd:45:ff: fc:67:fb:42:be:02:3e:1a:fa:f7:26:e9:83:9e:f3:45:0e:51: 40:54:2b:57:b2:4f:32:30:19:06:0c:56:a0:2f:69:b8:f1:d3: ff:55:e5:9d:d5:bf:3d:4b:67:a5:5c:fa:e6:0c:1c:a6:93:21: d5:d3:f1:2b:b6:31:74:82:f5:28:93:84:2e:a1:09:2b:9a:22: cf:4b:08:3c:f7:54 ====================================== --- Certificate chain 0 s:CN = skinvill.jp i:C = JP, O = CloudSecure Corporation, CN = CloudSecure RSA Domain Validation Secure Server CA 3 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 9 00:00:00 2025 GMT; NotAfter: Aug 9 23:59:59 2026 GMT 1 s:C = JP, O = CloudSecure Corporation, CN = CloudSecure RSA Domain Validation Secure Server CA 3 i:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46 a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA384 v:NotBefore: May 14 00:00:00 2025 GMT; NotAfter: May 13 23:59:59 2035 GMT 2 s:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46 i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA384 v:NotBefore: Mar 22 00:00:00 2021 GMT; NotAfter: Jan 18 23:59:59 2038 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIGXDCCBMSgAwIBAgIQOkIPHW3V9Pe18LYk/gJ87TANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJKUDEgMB4GA1UEChMXQ2xvdWRTZWN1cmUgQ29ycG9yYXRpb24x PTA7BgNVBAMTNENsb3VkU2VjdXJlIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1 cmUgU2VydmVyIENBIDMwHhcNMjUwODA5MDAwMDAwWhcNMjYwODA5MjM1OTU5WjAW MRQwEgYDVQQDEwtza2ludmlsbC5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMtZlz1lrfrdKvsZMJyngbvujbVpka+PZ80wnfoVnBBjyXkyKqthQ7lX Rkz+c3vF8L5+aJyWz4v9hqEu5donKakyqkDMYYFEI+vr1yqvvC7p6f2P6GVzCGXZ tpfPBiBBEk41wcS69xC4DVnwIhk2knCSPD8YxC0ZQxxbB0oOzyemn3Go7YHwr+RP 0qve6EET7OtbYxaiOxqH8UkeSDbRDEwLsLpcE5FrFJzJe7SU9UQF8Omp4hiv2eFA I6ne8TZNbw4+u+1QkwRapvsGF86KNE0MeJoxIQoHG8xnmsHGFYV/bk9YO09+v+FG O657oKHv3C4D5gQqcMhYRhZX0EIZC1kCAwEAAaOCAswwggLIMB8GA1UdIwQYMBaA FAFWE47vJ0vRr/IAKV4czXMMVX/GMB0GA1UdDgQWBBRghstX7mfwKpf2jjFSs7ir 7jS04TAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAwwCjAIBgZngQwBAgEwgYkGCCsGAQUF BwEBBH0wezBUBggrBgEFBQcwAoZIaHR0cDovL2NydC5zZWN0aWdvLmNvbS9DbG91 ZFNlY3VyZVJTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQTMuY3J0MCMG CCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAnBgNVHREEIDAeggtz a2ludmlsbC5qcIIPd3d3LnNraW52aWxsLmpwMIIBfQYKKwYBBAHWeQIEAgSCAW0E ggFpAWcAdQDYCVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAAAZiQvwOO AAAEAwBGMEQCIHihu750B6MzhKdckyi9/PKhBxHgXYJee0qdrWnENPSwAiBtZ+ko I1dEKL/DZIeac7lS1ZWMiYjqwhVwe+COdQyOfAB3AKyrMHBs6+yEMfQT0vSRXxEe QiRDsfKmjE88KzunHgLDAAABmJC/A0EAAAQDAEgwRgIhANVNjbmSG8TW/eSHeHFG TggQZq5XScgzKfo2xLcsh5weAiEAxceICD1rFbLdKkj4okSB8DSxwyWERqvAbfcO szB/gGkAdQDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZiQvwMA AAAEAwBGMEQCIBP48+r4+sYxL/U8AsSRbwvG9VppxHXo0SYHD0mmsYG7AiBMJ+dk nDOtCARWEaHym/YEF0qUcZI4f6wZ9JSRB0W0yDANBgkqhkiG9w0BAQsFAAOCAYEA BcsM9aZXyIdbmAZFjx1ne+CoV+d3Wf/dEGwHucWqwaRpr3bctAGdtBN/EDxgu+gT Ze9NvXkzvIxuKItiYTVH7OXPrN5KG9d8vk8qrTrv8pZVjuUy6CDkWAEFVW/rGLlb zsvSAJ14hnLmDuetoQ1grvED2WLfE+m9oWY51MJAA0fKeDQx+FD3LtMVI/JFiHHD npgUACmp7bUK6nHLMWYs6GRndAo2NiuwdfX13+wMyCbnuVIuxbZt1LFA9lvV0oOB dNEyDU6Ccr6EVitEZj5EsapGXEtQBwTKofcSWtwG5Q1lmW3AMHqiwqLoDUiQcNJb 3D3WpiR8fZTte1EXQw/Q/WGjhtBBd+Fjm1u8CcXEimp0Eqj7oDhm/6lz6sBIrQ3m c/avbLXrLamWnBpUfk/g9JffzbpfnUvI+B3TQt6zPjEyVGJ0KdRDxAg1XtboYA9t ordcdjo/1Ct7hTALNn5ytEH7IBcGm62kMZHGWfZaygNFPgDwjSnCmMvb1Evscu16 -----END CERTIFICATE----- subject=CN = skinvill.jp issuer=C = JP, O = CloudSecure Corporation, CN = CloudSecure RSA Domain Validation Secure Server CA 3 --- No client certificate CA names sent Peer signing digest: SHA512 Peer signature type: RSA Server Temp Key: ECDH, secp521r1, 521 bits --- SSL handshake has read 6314 bytes and written 516 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: C7F4CA7F06EF19FCC327F1989CAE8F37DC55FAF7827DA40675B9D4B76FBF1BE6 Session-ID-ctx: Master-Key: 2EDC2F0F95E432336E1B6F7CC77ACD78880625D528570DCEF34F15FA054F0127A1CC2134CDDE09926A4B98CD816F2253 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - 26 d1 05 05 cf f8 1d 84-33 43 c5 4e 5e 7f a7 ca &.......3C.N^... 0010 - 16 aa 4c 8f 94 d0 d3 1d-65 98 f8 e4 41 b1 be ec ..L.....e...A... 0020 - d6 fe d8 85 b3 0c b2 0b-2a d9 6e 1f 43 f3 91 8a ........*.n.C... 0030 - 64 38 83 82 f3 2a af ba-a5 a6 9a 47 75 e5 f8 b7 d8...*.....Gu... 0040 - cd c7 7f 0f 3c 8e 47 2a-56 5c ae 6c 1a 9d 06 4a ....<.G*V\.l...J 0050 - d0 85 2f 62 73 db 6d db-23 32 a8 3e 07 a7 7e 14 ../bs.m.#2.>..~. 0060 - 67 d3 5b ff 23 58 61 cf-c6 fc e6 f5 89 f9 37 39 g.[.#Xa.......79 0070 - 11 59 a4 df e3 62 51 b3-85 cb 02 c0 4a 1e 17 34 .Y...bQ.....J..4 0080 - 1d 4f ab 42 19 62 02 64-eb 74 a2 e5 10 4d f1 b0 .O.B.b.d.t...M.. 0090 - 29 20 9c 3b ac 51 a2 99-01 b1 40 8a 45 0d ca e6 ) .;.Q....@.E... 00a0 - 8d 8f 3d 10 ad 1e e2 7f-c0 2a 1c 83 74 50 4d aa ..=......*..tPM. 00b0 - 52 73 f7 8a cf f9 78 eb-ef 03 13 d5 e8 1e a1 98 Rs....x......... Start Time: 1762094762 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no ---
#
OCSP response of
skinvill.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.