Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://test.ebisu-womens.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=test.ebisu-womens.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=test.ebisu-womens.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=test.ebisu-womens.jp
And you can
check your domain name
.
#
Certificate of
test.ebisu-womens.jp
{ "serial": "0D8B496074145AB3145551CE1C3FEED4", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "test.ebisu-womens.jp", "port": 443, "subjectAltName": "DNS:*.ebisu-womens.jp, DNS:ebisu-womens.jp", "is_valid": true, "CA": "DigiCert Inc", "updated_at": "2025/08/15 09:00:00", "expires_at": "2026/08/28 08:59:59", "today": "2025/11/03 14:00:46", "UTC": { "updated_at": "2025-08-15T00:00:00Z", "expires_at": "2026-08-27T23:59:59Z", "today": "2025-11-03T05:00:46Z" }, "remaining_days": 297 }
#
OCSP response of
test.ebisu-womens.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = *.ebisu-womens.jp i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 15 00:00:00 2025 GMT; NotAfter: Aug 27 23:59:59 2026 GMT 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 2 12:24:33 2017 GMT; NotAfter: Nov 2 12:24:33 2027 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIQDYtJYHQUWrMUVVHOHD/u1DANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx MB4XDTI1MDgxNTAwMDAwMFoXDTI2MDgyNzIzNTk1OVowHDEaMBgGA1UEAwwRKi5l YmlzdS13b21lbnMuanAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDM K9baoeKObTfHFiev/rBvdXKcvh3cHgUBmydVRR+MnFh3n/V507KY3VmcQ6vACkhu wDatUMnqSupTCOID0RVUrnz1Qg+fw4/46zLbtrcR9ca2tE7YQZsZUzXj+iOncDet b2f3jC6MuU4+rsW6j8Yx5JURipffeSLcJqucAeVOAxQCZgauqtmeScVV7t6q/6ku qwmqbeDMfvchM1pz751HP7PAUJvfec1ME6CG4HkNd/wukUbMdgWYu9V/C191A0TR ZeTUOUZwp5NruRy1NWc4G1b0kj4ORBvyULneudwg5fNjxkLesj0Fph5R7iWWkigP 9872QWgs5LaFz7oC6vcUdWn9NTMNlT/bOKM4/feYzWD1ESvwMAJk8o8wtV+G7nZk NnVCHFplwj+FnTkJmhcfLPRv5lMAm5B8Ozh7GDZCnTVk9/+VVMweWT4xCGSTPYqF JBEOzovW3veh7AVWiIB/NBfwxNwx3C90LUqu7TAixd31OSjo7e72rYVex/OSHDZA UJ7geUg6HMei6wXN4F8e2z1JlPMfA+Mu9mZeT/Ggp3LzHzqZ0TMSyC6XEmKK84lg dcUwBGbWKWq0OOQh75m29Xnm4D8tB25dqw+qaQWASK5Mbib6qFEHhLTqpZ9dhJLK 4fhKEjp7BEd28sDiSbaITTrlLBkv0nYJTV6TGtwT5wIDAQABo4IDKzCCAycwHwYD VR0jBBgwFoAUDNtsgkkPSmcKuBTuesRIUojrVjgwHQYDVR0OBBYEFO20CmBcaloy IMf1udGBt3lglzlfMC0GA1UdEQQmMCSCESouZWJpc3Utd29tZW5zLmpwgg9lYmlz dS13b21lbnMuanAwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYb aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0 cDovL2NkcC5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcxLmNybDB2Bggr BgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wu Y29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFw aWRTU0xUTFNSU0FDQUcxLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIE AgSCAW4EggFqAWgAdgDYCVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAA AZisd0AlAAAEAwBHMEUCICPTN7O5I+vwvP/xm5uXIGigx7e60M3SlvFaXVlAOngd AiEAks91fvlYW1R5zB/zUE/hekPd99Bf5eiBJiFUbqcwTa8AdQDCMX5XRRmjRe5/ ON6ykEHrx8IhWiK/f9W1rXaa2Q5SzQAAAZisd0AUAAAEAwBGMEQCIGVhxEaTL5mc bs/3i1DbcdgomkMdf53Rv0T+PHVLrnwDAiBNJG806aVauj20mn/U8bHVIDk5Giaa cUyZJkWU4CbNnQB3AJROQ4f67MHvgfMZJCaoGGUBx9NfOAIBP3JnfVU3LhnYAAAB mKx3QCUAAAQDAEgwRgIhAPvzrqnYmtsyCCJzVjveblMXDFIW3pmxf44q0+wvbcj2 AiEAwa1yKXC/TPo0e+lrwYFFQbsw2NG0v98ZN4rn18RDx8QwDQYJKoZIhvcNAQEL BQADggEBABxZNP2GQf5FNzm7f3JBM/YGO76tctRV3injpXmfSBdUps5Xnh07qdkD S+x2/57j9C1z2TezpjFWsZxmthmktnxyBOO/LHDHXKOzqF2JJ88UqHvLjZIh8t8L tvxUUfRfycZIeZoGRLpgnPOZ3++b/Q7rTY+lyrJ3S7u5Qttft4N0JmD8REU3xR3z LJWvX3k62CDOSnZzWsChQU59dWtu0uecbrMHrKwl1+/2sqE63WXVZNhbe8b3iZ7+ MtSGmHbdpm47I23bZzHeJMyt8ooCUP3e7BBixxNUilBP4VcLgTgrBuLUYUVAPhZc 2t3E98xQ+cwvjEIQbKbS9PeSrGdrLhI= -----END CERTIFICATE----- subject=CN = *.ebisu-womens.jp issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 --- No client certificate CA names sent Peer signing digest: SHA512 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4019 bytes and written 457 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: A0EDB438108FAABAE54A160BDFE73744D412E088E713C460C3B72AC9355B3B42 Session-ID-ctx: Master-Key: 76AAE828AA0062E544F3E9F66683878E89730827BA3655ACD258DAE0B4514F6573F3C6C5E23B8AE23EAD8BB6FE27DDAB PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - 67 07 31 b3 a6 2d c5 11-d8 45 ad 14 c8 5e 68 f1 g.1..-...E...^h. 0010 - d2 b0 48 ca 89 f4 d7 1d-ad f5 23 5a 99 20 c3 47 ..H.......#Z. .G 0020 - c3 d1 54 83 dc 59 ad e3-df 49 2b 2d df 8c 1d 4e ..T..Y...I+-...N 0030 - 26 0c e6 f2 04 db c4 f8-5f cf ec 2c 88 63 69 a0 &......._..,.ci. 0040 - 3c ab 92 94 49 4e 36 32-fa 23 f1 1c 21 42 b3 e0 <...IN62.#..!B.. 0050 - ab f5 fc f5 77 56 5f 03-c8 a3 d1 45 c9 c3 2c 68 ....wV_....E..,h 0060 - 69 91 a3 2a 5a 80 53 f4-db a2 2b 52 1b 44 31 10 i..*Z.S...+R.D1. 0070 - 13 02 37 ed b3 bc 45 51-54 90 67 ca 15 71 9e 6b ..7...EQT.g..q.k 0080 - a6 4d 57 05 cd 7e df 51-db 8d 7e 59 76 2f 52 b1 .MW..~.Q..~Yv/R. 0090 - 77 b1 36 f6 c7 da ce 7b-4c d3 fc f8 52 b8 59 76 w.6....{L...R.Yv 00a0 - 46 89 6d 02 3f 61 c2 07-c4 61 73 f5 2d 9d 10 04 F.m.?a...as.-... 00b0 - 39 98 3a 34 d3 92 78 92-d2 4f c9 96 95 47 41 35 9.:4..x..O...GA5 00c0 - 91 a3 86 52 48 2e 0e 1d-8c 11 88 76 56 89 20 09 ...RH......vV. . Start Time: 1762146048 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no ---
#
OCSP response of
test.ebisu-womens.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.