Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.b-merit.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.b-merit.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.b-merit.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.b-merit.jp
And you can
check your domain name
.
#
Certificate of
www.b-merit.jp
{ "serial": "09ABB2EF548633B903DEC5C07D4C7AF5", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.b-merit.jp", "port": 443, "subjectAltName": "DNS:www.b-merit.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2024/11/04 09:00:00", "expires_at": "2025/12/05 08:59:59", "today": "2025/07/13 11:40:38", "UTC": { "updated_at": "2024-11-04T00:00:00Z", "expires_at": "2025-12-04T23:59:59Z", "today": "2025-07-13T02:40:38Z" }, "remaining_days": 144 }
#
OCSP response of
www.b-merit.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = www.b-merit.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M02 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 4 00:00:00 2024 GMT; NotAfter: Dec 4 23:59:59 2025 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M02 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:25:30 2022 GMT; NotAfter: Aug 23 22:25:30 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIQCauy71SGM7kD3sXAfUx69TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MTEwNDAwMDAwMFoXDTI1MTIwNDIzNTk1OVowGTEX MBUGA1UEAxMOd3d3LmItbWVyaXQuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDVZuFYjfZVlJr7C2m7HuJebC1aF4xNXgxQJk9SrnEh8HX9A4bQb4DV GuInKnHef5fG0ThilkuFGHaWBSEFr2x4I1kGHp65VxoR+najq4IHGNE/pkxFqjff ehSLf0l1P/lL0q7a2yGgtQj5FZntM+4B6v1xW90mhD8OZQ/Goc72ju4qdBjtLhYa zQ33i44+HY3sE4dwpDd7Vmg/v3kLSthbVjNwor967gsSA0mab5jGOTQFEIGB9Ooz D5JWYDS62IZ+MOSOA43iHBuYRuyrlYvPIvSzNoWUgRkTPJ+QTuX48A7weaUoC+r4 zMv/4xVCFULeUfagQCzIWfjl5YE8moVjAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAW gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUzLHI1UAIZxg6L/QcZqwL cHTtAVcwGQYDVR0RBBIwEIIOd3d3LmItbWVyaXQuanAwEwYDVR0gBAwwCjAIBgZn gQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRy dXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB Af8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgAS8U40vVNyTIQGGcOP P3oT+Oe1YoeInG0wBYTr5YYmOgAAAZL0np7LAAAEAwBHMEUCICAyvF01Ezffw/a6 Y/e4CyDzD1rfyrSOLxcyuoTSvFE3AiEAkT5uYEigCH77UcuZy+8VUW+2vTBvml4J GQFJexzrXU0AdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAZL0 np6kAAAEAwBGMEQCIG6Q3jqrrE0jlBN4v4g1/tzmZWfLIz0GXCNa7wnz0Gg+AiAD /EDe5XzTtMqnrI1TKrbpL3hWIE/kBpRgLGP8vAS3LgB1AMz7D2qFcQll/pWbU87p snwi6YVcDZeNtql+VMD+TA2wAAABkvSenqYAAAQDAEYwRAIgM+dYKf9R7fZZRPVZ pxGCFB9aEEWkIuy3CbK7VEgG/boCIGae+n9mcqPYy8EgJi7yYDmF0RNJ4J95DLV0 d4mce1ylMA0GCSqGSIb3DQEBCwUAA4IBAQA4u9DP56+fzQ3Ya1vIjEOShf22qNSO Aw42AM1QbiWLuY76AkE9SFDflWxhSJ3hG0c2EQUHUliUsvMpSW5Jvy6XRItnJWh8 Pfuf/UQ50tClChTuXGOPTFlLH7cXDrEzTcmXAJVOaeTIdjcwV2uBDee3ZSIM1K/t XtX0NwaolhflSyegA696T1MxhnjCcPUO1QQF6hiMJfIB/Vq4TuGmE8FEfTbTPKfj UfOiMD/bbbuJjpcBg3mGpNr7Jhos4EG6d6B2SfcvPXqvCTj+sPVnmgjcCy/xV4qd ZWiZMsl/xYLqIjEiuA/HIPhRWtkup6XTkpHctorcXKxtda0/qxamhDr1 -----END CERTIFICATE----- subject=CN = www.b-merit.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M02 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4454 bytes and written 451 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 68F353E4237B45E33110D70BF7AFD25D274FF660C0DDE3510128159CCC6B8A5B Session-ID-ctx: Master-Key: 97785A4C2974394CA4B1F95CFB6F25AD56CE9C6BCB792FF8778AC361F4434CC8FE08D10CA086CB5E57B867FC4F39C12B PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 01 d6 0b 2b b6 45 14 3a-a1 db f4 fb 83 d1 f1 be ...+.E.:........ 0010 - 74 19 31 60 b7 69 de f7-ff 58 8e 6a 9b 1c 44 d0 t.1`.i...X.j..D. 0020 - 18 36 5f 86 4d 95 ff 61-de ab 66 14 96 68 61 c2 .6_.M..a..f..ha. 0030 - ab d0 53 3b 77 11 a4 2b-de b2 8c 41 c5 07 20 92 ..S;w..+...A.. . 0040 - 0a 90 2e ed d2 e7 ef 03-fd d4 71 30 cd dc 08 1b ..........q0.... 0050 - 66 ce 87 e9 6a ea 58 88-b4 dc 60 57 86 57 09 6b f...j.X...`W.W.k 0060 - e3 bd 2b eb 4a e7 16 1e-57 a7 cb d3 80 40 ba b1 ..+.J...W....@.. 0070 - cb 6b 39 f8 b6 9b 37 dc-45 f7 5b 8c 94 d2 02 33 .k9...7.E.[....3 0080 - 7e f4 e4 ae 6c 89 82 bb-8e b9 ~...l..... Start Time: 1752374439 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
www.b-merit.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.