Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://store.hikarifield.co.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=store.hikarifield.co.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=store.hikarifield.co.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=store.hikarifield.co.jp
And you can
check your domain name
.
#
Certificate of
store.hikarifield.co.jp
{ "serial": "07ECD94C1EC87530BDB1036C30D26A88", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "store.hikarifield.co.jp", "port": 443, "subjectAltName": "DNS:store.hikarifield.co.jp, DNS:api.hikarifield.co.jp, DNS:shop.hikarifield.co.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2024/09/26 09:00:00", "expires_at": "2025/10/27 08:59:59", "today": "2025/07/13 11:17:58", "UTC": { "updated_at": "2024-09-26T00:00:00Z", "expires_at": "2025-10-26T23:59:59Z", "today": "2025-07-13T02:17:58Z" }, "remaining_days": 105 }
#
OCSP response of
store.hikarifield.co.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = store.hikarifield.co.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M03 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 26 00:00:00 2024 GMT; NotAfter: Oct 26 23:59:59 2025 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M03 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:26:04 2022 GMT; NotAfter: Aug 23 22:26:04 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIQB+zZTB7IdTC9sQNsMNJqiDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDkyNjAwMDAwMFoXDTI1MTAyNjIzNTk1OVowIjEg MB4GA1UEAxMXc3RvcmUuaGlrYXJpZmllbGQuY28uanAwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQD9uWJ+GdEuPxal92DS8oSEIY06mGfRs0KCZf7ldt1t X8jqK2ggiyyP1QP2U4TUhkmZLm0ta1uxVMMGDclP0TbGeX9qAJ0Vt55O/syfL5un l+kghMTw4d4BYiCGDvtYNv7TcRlmNg9wNq9PdZFnQF96+2p/Z47LqhMA+sAXSVT+ XdFz9RLGY02pen4HAnGAGu5wZ+t+UE1RIYwp371oPyz+504vpWVH5JF9rtRNE/47 RUPbq+bc9jlTqbsvKsc48kbLrS/kZylDzKnOrjh2QXDJlkBMwFXnN/drryab32W+ QqVIfzIFeKZbfIn+Lj0loOcYuwLykxCAIVrxV2MGN45lAgMBAAGjggMeMIIDGjAf BgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUzY3vtY39 Gt8JIcTsvCGvvOxJoS8wUQYDVR0RBEowSIIXc3RvcmUuaGlrYXJpZmllbGQuY28u anCCFWFwaS5oaWthcmlmaWVsZC5jby5qcIIWc2hvcC5oaWthcmlmaWVsZC5jby5q cDATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j cmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20v cjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB2ABLxTjS9U3JMhAYZw48/ehP457Vih4icbTAFhOvlhiY6AAABkiv6kYsAAAQD AEcwRQIhAIQMdvTA+QkMGRhY0qvzml2kBf389nl0/ijM5mMYiH+dAiAMaNYn93Q6 MfU5+/bTWWd6rREtu9mPq6Rv4Kl/70naGQB1AObSMWNAd4zBEEEG13G5zsHSQPaW hIb7uocyHf0eN45QAAABkiv6kYsAAAQDAEYwRAIgK43xNyvG/eGXqTqJ5ZcrcJEj GHej0j2EwDTCzJ4YYXoCIAUQP1CfHQH82OWsMU4353Lt2k9Lq7m6BMTFfIOmBedW AHYAzPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5UwP5MDbAAAAGSK/qRoQAABAMA RzBFAiEAzq/dehlguFtD9NKyGn8j/LlriAQoaf/40NefadPW5eQCIBEg2r+7KUJX LW1pf4faNzVKFXfMl+y3z5GhLkmG8mY1MA0GCSqGSIb3DQEBCwUAA4IBAQAxLuyL KqmgglOGkbM9HIsO6cQiGhKE3DaEeY0zWNbJUGi+BnmkkFyU9P+ljtNFHM1hhWuZ 4cUvZcEWMTQErQ9RIgsGd2k58iLwh7rd3Dht8sxxAPXrR4mn0IqCU6qsmTCwaV7M pF49Li+H0TsbkazKUkViVh6QyoOxu/r9wU7S7+Iu1WQ1fWqIv1twDhYwt3Zzj6Wr TqulyZoNrvPXGa5kXxGhgcgalK+S+8h5J/1KabsnFyZNEJof4X/Xy7yeo5jFcIwt EgMkmGLFGnOS5Pd6p94g0ilp9D8Hi/af/qiX3Td+hlKfMIQvvgzyYtHaznGZqRl7 aeu43JDm1HNng9rk -----END CERTIFICATE----- subject=CN = store.hikarifield.co.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M03 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4520 bytes and written 460 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 54F63E2789E3F86E63FDF103E0EC9F0AFEBAFEF234D7F73E88649BA76EBDF814 Session-ID-ctx: Master-Key: 7C863D6449F4C553089C7CB18FFA7736F942D10AE25112125625EF67AB7082D284F75A0C3546B2D0E881EA07E45CAC9B PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 01 a2 da c3 93 08 52 92-d9 51 a2 19 5d 50 dc be ......R..Q..]P.. 0010 - b8 7c 73 43 65 f7 b1 12-42 a6 74 21 ef 2b 88 ec .|sCe...B.t!.+.. 0020 - b1 20 bd 49 75 84 44 2b-0d 73 7e 0d c2 53 ce 54 . .Iu.D+.s~..S.T 0030 - 2b cc b2 67 92 45 24 11-3c e9 94 06 56 3f 3a 5d +..g.E$.<...V?:] 0040 - 37 53 3d 08 36 06 31 2b-99 bf 8b db 49 05 5e af 7S=.6.1+....I.^. 0050 - 30 99 d8 f4 73 27 ea 9c-8c b6 6b 32 ac 85 b7 24 0...s'....k2...$ 0060 - 2a 2e dd 5f c3 da 6c e2-d5 9a 32 3b e8 87 c3 e4 *.._..l...2;.... 0070 - 96 b6 e1 6e 85 e1 dd d2-6d 0f 8c 18 80 6a 25 0c ...n....m....j%. 0080 - 66 4b 92 b3 bd a6 6b 0f-3c c7 fK....k.<. Start Time: 1752373080 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
store.hikarifield.co.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.