Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.b-merit.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.b-merit.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.b-merit.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.b-merit.jp
And you can
check your domain name
.
#
Certificate of
www.b-merit.jp
{ "serial": "09ABB2EF548633B903DEC5C07D4C7AF5", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.b-merit.jp", "port": 443, "subjectAltName": "DNS:www.b-merit.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2024/11/04 09:00:00", "expires_at": "2025/12/05 08:59:59", "today": "2025/05/09 22:54:52", "UTC": { "updated_at": "2024-11-04T00:00:00Z", "expires_at": "2025-12-04T23:59:59Z", "today": "2025-05-09T13:54:52Z" }, "remaining_days": 209 }
#
OCSP response of
www.b-merit.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = www.b-merit.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M02 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 4 00:00:00 2024 GMT; NotAfter: Dec 4 23:59:59 2025 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M02 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:25:30 2022 GMT; NotAfter: Aug 23 22:25:30 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIQCauy71SGM7kD3sXAfUx69TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MTEwNDAwMDAwMFoXDTI1MTIwNDIzNTk1OVowGTEX MBUGA1UEAxMOd3d3LmItbWVyaXQuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDVZuFYjfZVlJr7C2m7HuJebC1aF4xNXgxQJk9SrnEh8HX9A4bQb4DV GuInKnHef5fG0ThilkuFGHaWBSEFr2x4I1kGHp65VxoR+najq4IHGNE/pkxFqjff ehSLf0l1P/lL0q7a2yGgtQj5FZntM+4B6v1xW90mhD8OZQ/Goc72ju4qdBjtLhYa zQ33i44+HY3sE4dwpDd7Vmg/v3kLSthbVjNwor967gsSA0mab5jGOTQFEIGB9Ooz D5JWYDS62IZ+MOSOA43iHBuYRuyrlYvPIvSzNoWUgRkTPJ+QTuX48A7weaUoC+r4 zMv/4xVCFULeUfagQCzIWfjl5YE8moVjAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAW gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUzLHI1UAIZxg6L/QcZqwL cHTtAVcwGQYDVR0RBBIwEIIOd3d3LmItbWVyaXQuanAwEwYDVR0gBAwwCjAIBgZn gQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRy dXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB Af8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgAS8U40vVNyTIQGGcOP P3oT+Oe1YoeInG0wBYTr5YYmOgAAAZL0np7LAAAEAwBHMEUCICAyvF01Ezffw/a6 Y/e4CyDzD1rfyrSOLxcyuoTSvFE3AiEAkT5uYEigCH77UcuZy+8VUW+2vTBvml4J GQFJexzrXU0AdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAZL0 np6kAAAEAwBGMEQCIG6Q3jqrrE0jlBN4v4g1/tzmZWfLIz0GXCNa7wnz0Gg+AiAD /EDe5XzTtMqnrI1TKrbpL3hWIE/kBpRgLGP8vAS3LgB1AMz7D2qFcQll/pWbU87p snwi6YVcDZeNtql+VMD+TA2wAAABkvSenqYAAAQDAEYwRAIgM+dYKf9R7fZZRPVZ pxGCFB9aEEWkIuy3CbK7VEgG/boCIGae+n9mcqPYy8EgJi7yYDmF0RNJ4J95DLV0 d4mce1ylMA0GCSqGSIb3DQEBCwUAA4IBAQA4u9DP56+fzQ3Ya1vIjEOShf22qNSO Aw42AM1QbiWLuY76AkE9SFDflWxhSJ3hG0c2EQUHUliUsvMpSW5Jvy6XRItnJWh8 Pfuf/UQ50tClChTuXGOPTFlLH7cXDrEzTcmXAJVOaeTIdjcwV2uBDee3ZSIM1K/t XtX0NwaolhflSyegA696T1MxhnjCcPUO1QQF6hiMJfIB/Vq4TuGmE8FEfTbTPKfj UfOiMD/bbbuJjpcBg3mGpNr7Jhos4EG6d6B2SfcvPXqvCTj+sPVnmgjcCy/xV4qd ZWiZMsl/xYLqIjEiuA/HIPhRWtkup6XTkpHctorcXKxtda0/qxamhDr1 -----END CERTIFICATE----- subject=CN = www.b-merit.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M02 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4454 bytes and written 451 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 7C857428A17AED322A11F216C11DCEE9012C18A8AF6B10811E8C49496BFBCCDB Session-ID-ctx: Master-Key: E84777967F3AEAF67F3E911176F92CC067D2CA662A2FE14266724496C1E5EE4E723DD173B63F3253211331691AAAE234 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 01 ed 97 0d ff 57 75 c0-19 99 f6 93 0b ab 25 7b .....Wu.......%{ 0010 - 4a 71 f4 62 50 66 31 4b-24 03 c6 ad 3c 99 94 4d Jq.bPf1K$...<..M 0020 - b5 57 e6 c2 c0 0b 68 c3-77 7a dd ee 06 34 2a f9 .W....h.wz...4*. 0030 - 26 05 7f f4 97 d4 08 fb-b2 62 60 49 83 25 18 70 &........b`I.%.p 0040 - 08 fc da d0 83 6b 32 60-56 ba 2d 13 35 41 65 b2 .....k2`V.-.5Ae. 0050 - e7 ca 22 55 7d 1b 68 e2-b8 33 25 f0 b1 a4 3f 27 .."U}.h..3%...?' 0060 - 75 e4 41 cc 6e 43 73 9b-4c 0b 1c f6 79 1a 5e e6 u.A.nCs.L...y.^. 0070 - 77 b2 ca 7f fc 89 bb ab-1e f3 22 74 44 e5 8d 17 w........."tD... 0080 - 8d 01 f9 b1 86 15 99 30-0d c3 .......0.. Start Time: 1746798892 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
www.b-merit.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.