Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.b-merit.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.b-merit.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.b-merit.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.b-merit.jp
And you can
check your domain name
.
#
Certificate of
www.b-merit.jp
{ "serial": "09ABB2EF548633B903DEC5C07D4C7AF5", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.b-merit.jp", "port": 443, "subjectAltName": "DNS:www.b-merit.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2024/11/04 09:00:00", "expires_at": "2025/12/05 08:59:59", "today": "2024/11/21 15:36:40", "UTC": { "updated_at": "2024-11-04T00:00:00Z", "expires_at": "2025-12-04T23:59:59Z", "today": "2024-11-21T06:36:40Z" }, "remaining_days": 378 }
#
OCSP response of
www.b-merit.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = www.b-merit.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M02 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 4 00:00:00 2024 GMT; NotAfter: Dec 4 23:59:59 2025 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M02 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:25:30 2022 GMT; NotAfter: Aug 23 22:25:30 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIQCauy71SGM7kD3sXAfUx69TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MTEwNDAwMDAwMFoXDTI1MTIwNDIzNTk1OVowGTEX MBUGA1UEAxMOd3d3LmItbWVyaXQuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDVZuFYjfZVlJr7C2m7HuJebC1aF4xNXgxQJk9SrnEh8HX9A4bQb4DV GuInKnHef5fG0ThilkuFGHaWBSEFr2x4I1kGHp65VxoR+najq4IHGNE/pkxFqjff ehSLf0l1P/lL0q7a2yGgtQj5FZntM+4B6v1xW90mhD8OZQ/Goc72ju4qdBjtLhYa zQ33i44+HY3sE4dwpDd7Vmg/v3kLSthbVjNwor967gsSA0mab5jGOTQFEIGB9Ooz D5JWYDS62IZ+MOSOA43iHBuYRuyrlYvPIvSzNoWUgRkTPJ+QTuX48A7weaUoC+r4 zMv/4xVCFULeUfagQCzIWfjl5YE8moVjAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAW gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUzLHI1UAIZxg6L/QcZqwL cHTtAVcwGQYDVR0RBBIwEIIOd3d3LmItbWVyaXQuanAwEwYDVR0gBAwwCjAIBgZn gQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRy dXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB Af8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgAS8U40vVNyTIQGGcOP P3oT+Oe1YoeInG0wBYTr5YYmOgAAAZL0np7LAAAEAwBHMEUCICAyvF01Ezffw/a6 Y/e4CyDzD1rfyrSOLxcyuoTSvFE3AiEAkT5uYEigCH77UcuZy+8VUW+2vTBvml4J GQFJexzrXU0AdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAZL0 np6kAAAEAwBGMEQCIG6Q3jqrrE0jlBN4v4g1/tzmZWfLIz0GXCNa7wnz0Gg+AiAD /EDe5XzTtMqnrI1TKrbpL3hWIE/kBpRgLGP8vAS3LgB1AMz7D2qFcQll/pWbU87p snwi6YVcDZeNtql+VMD+TA2wAAABkvSenqYAAAQDAEYwRAIgM+dYKf9R7fZZRPVZ pxGCFB9aEEWkIuy3CbK7VEgG/boCIGae+n9mcqPYy8EgJi7yYDmF0RNJ4J95DLV0 d4mce1ylMA0GCSqGSIb3DQEBCwUAA4IBAQA4u9DP56+fzQ3Ya1vIjEOShf22qNSO Aw42AM1QbiWLuY76AkE9SFDflWxhSJ3hG0c2EQUHUliUsvMpSW5Jvy6XRItnJWh8 Pfuf/UQ50tClChTuXGOPTFlLH7cXDrEzTcmXAJVOaeTIdjcwV2uBDee3ZSIM1K/t XtX0NwaolhflSyegA696T1MxhnjCcPUO1QQF6hiMJfIB/Vq4TuGmE8FEfTbTPKfj UfOiMD/bbbuJjpcBg3mGpNr7Jhos4EG6d6B2SfcvPXqvCTj+sPVnmgjcCy/xV4qd ZWiZMsl/xYLqIjEiuA/HIPhRWtkup6XTkpHctorcXKxtda0/qxamhDr1 -----END CERTIFICATE----- subject=CN = www.b-merit.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M02 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4454 bytes and written 451 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: BBB842063951B57C5FB7AAD73C12B86B354391831BAE5DB698A4FA079CF60D0C Session-ID-ctx: Master-Key: 4F707E51F2DD83C914D1C9B73CAF2F4A365E033EDD1DB61C0FE396FFDCE7340CFA154E69DA6AD900030BBA55387A3753 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 01 90 2c 4c d2 f0 a5 f2-22 5a 26 2c 1d 32 59 aa ..,L...."Z&,.2Y. 0010 - d0 03 8e 0d 72 94 98 12-09 3f 3b 3b 6d 06 21 6f ....r....?;;m.!o 0020 - 2d fa 96 1d cf 7f 95 d0-0c 22 fd bf c1 bd fb 89 -........"...... 0030 - 9f ce 36 25 f0 8a e4 32-04 dd 0f 0e 5f ff 64 50 ..6%...2...._.dP 0040 - 71 1b 95 2f 70 c2 25 20-ff 5c e1 9a be 16 de d9 q../p.% .\...... 0050 - 03 82 2f 09 1c db af b3-41 69 4a 0c 6e 47 3d 80 ../.....AiJ.nG=. 0060 - fb e8 38 6b 65 b7 c6 de-95 f2 bc ba 03 21 c3 8a ..8ke........!.. 0070 - ef ed 7e a1 55 c6 90 f8-fe 4e 19 79 32 bf 2e bc ..~.U....N.y2... 0080 - 51 50 85 36 6a 11 61 a8-24 35 QP.6j.a.$5 Start Time: 1732171001 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
www.b-merit.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.