Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.circumflex.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.circumflex.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.circumflex.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.circumflex.jp
And you can
check your domain name
.
#
Certificate of
www.circumflex.jp
{ "serial": "CA0F586A56A0626D0A1384DDF033D314", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.circumflex.jp", "port": 443, "subjectAltName": "DNS:circumflex.jp, DNS:www.circumflex.jp", "is_valid": true, "CA": "Google Trust Services", "updated_at": "2026/09/22 07:46:36", "expires_at": "2026/12/21 08:45:52", "today": "2026/09/28 19:19:21", "UTC": { "updated_at": "2026-09-21T22:46:36Z", "expires_at": "2026-12-20T23:45:52Z", "today": "2026-09-28T10:19:21Z" }, "remaining_days": 83 }
#
OCSP response of
www.circumflex.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN=circumflex.jp i:C=US, O=Google Trust Services, CN=WR3 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Sep 21 22:46:36 2026 GMT; NotAfter: Dec 20 23:45:52 2026 GMT 1 s:C=US, O=Google Trust Services, CN=WR3 i:C=US, O=Google Trust Services LLC, CN=GTS Root R1 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Dec 13 09:00:00 2023 GMT; NotAfter: Feb 20 14:00:00 2029 GMT 2 s:C=US, O=Google Trust Services LLC, CN=GTS Root R1 i:C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA a:PKEY: RSA, 4096 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Jun 19 00:00:42 2020 GMT; NotAfter: Jan 28 00:00:42 2028 GMT 3 s:C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA i:C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA a:PKEY: RSA, 2048 (bit); sigalg: sha1WithRSAEncryption v:NotBefore: Sep 1 12:00:00 1998 GMT; NotAfter: Jan 28 12:00:00 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIRAMoPWGpWoGJtChOE3fAz0xQwDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IzMB4XDTI2MDkyMTIyNDYzNloXDTI2MTIyMDIzNDU1MlowGDEW MBQGA1UEAxMNY2lyY3VtZmxleC5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANIgOPnVCloDLHIwsHorMHoOPwNPLsa3xyjcBpwOv8/jje2crVmgIL8f qvhEqoIH1TmOvGILBIk5x6A4aYIK1q2+tgn/xwXousw+MLiQAhUTOCrUilhyBbI/ Yy2GqmloiJvws+KH7OdcEgIsSPPZZYTAPafv1Imre192N52Ia38XwUOCUU+o5+Tv fHPKr9jLAlt2TU6G+VkelicQUtkFpP/7VTDIzk4YuvcGodd2yBXIJd6QZQ/8rkQt CffdU6llfQmIFdclNbbIePQhF2Q/No16rROFAlCdlUeBsK0YXKaGsc3Dq4U8hD52 JRy9i5xG0NiSSkXRjDnoDrFXZXN3voECAwEAAaOCAjAwggIsMA4GA1UdDwEB/wQE AwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQGqdzZFD1Q9RuY7bbdEee9FrcM/DAfBgNVHSMEGDAWgBTHgfX9jojZADxNY6JQ MSSgziP+IzA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAKGGWh0dHA6Ly9pLnBr aS5nb29nL3dyMy5jcnQwKwYDVR0RBCQwIoINY2lyY3VtZmxleC5qcIIRd3d3LmNp cmN1bWZsZXguanAwEwYDVR0gBAwwCjAIBgZngQwBAgEwNgYDVR0fBC8wLTAroCmg J4YlaHR0cDovL2MucGtpLmdvb2cvd3IzL3F5MFlwZ01NY3Q0LmNybDCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DI xWl3AAABoMZdRekAAAQDAEcwRQIgCr4bgd71cfWfjf2sQQqPaU0b8YFSdp3t3pOV 2bll0xICIQCYoanG4SeFIRbNoKKiocXMhik3ShN57uCgM1vs5Zh+7wB2AK9niDtX sE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6AAABoMZdRmQAAAQDAEcwRQIhANdd JKmoaXz6djvbuHqzj4GLLRJF5wbHSLX67sWLcLFCAiB0dleZvp0suiFAVapk3ypp ag1fyYcvKF98Oj+EgXqtxjANBgkqhkiG9w0BAQsFAAOCAQEAFc0pHaat8TUpqFmN +BDsp1hTbCOfFXybKv3b6OPIqmcsWlts56GaVvlUAaalyhiUGgaLgQOJDBWUOJDZ 0EMgdJ2aiOdG8dE5rSeUrUwbhHMbdLej2DXDhKOe3AS0vaHh/LdEWRgyziUA2Pvt ZMm9Bbdgq9VqFSuJqD+M9FygMb3Mqe0r15qE/YgONmgF3XVLo/8B4ItLbgN4pHJ2 e82s3BlgAP4DrPxl0boyPMHpKAV4XJL7BWWMIaS+b7SA6A4JpdWlHqjdwZgoVdfu FSueJ4Z9p6oCdn++ikMOuinUEAN+iBGPzpAaKgCmu8QPixiI7LLSTbGibPzwZU9y mlITHg== -----END CERTIFICATE----- subject=CN=circumflex.jp issuer=C=US, O=Google Trust Services, CN=WR3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: rsa_pss_rsae_sha256 Negotiated TLS1.3 group: X25519MLKEM768 --- SSL handshake has read 6513 bytes and written 1632 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Protocol: TLSv1.3 Server public key is 2048 bit This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_128_GCM_SHA256 Session-ID: D7FED414C9D1F6F2605363E1311FF2BC18C12C432016BCEDD7FDAAFBD43446C1 Session-ID-ctx: Resumption PSK: 9F0EC92FB832D36BF7CFB1223D0CC925F709D8870A43CB44D2E0B29AABF05F7B PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 3a 74 b6 5c 6c d9 54 90-5a 47 fd f3 d9 66 eb bb :t.\l.T.ZG...f.. 0010 - f0 76 5e 2e 3e 1f 59 44-10 33 b8 2a a3 e8 e7 70 .v^.>.YD.3.*...p 0020 - 7f 2d 91 d3 d0 a9 58 47-de a7 4b 1e 33 08 20 7e .-....XG..K.3. ~ 0030 - 3e 48 de f7 ac 14 00 70-21 b9 e3 85 2c 2e ee af >H.....p!...,... 0040 - ad 1b 8b f0 e4 02 06 19-d9 56 82 dc 70 e6 7d 6b .........V..p.}k 0050 - 08 97 09 80 f6 97 46 55-d2 76 2b 25 46 23 c4 33 ......FU.v+%F#.3 0060 - 85 06 07 5e 0d eb 10 3a-b8 d9 30 5e ab f7 2a 8b ...^...:..0^..*. 0070 - 3d 93 17 07 44 b6 99 21-92 1a 75 88 b3 5f 15 38 =...D..!..u.._.8 0080 - b6 73 0a 0f 17 df fc e0-12 24 0c 20 d9 49 40 14 .s.......$. .I@. 0090 - e7 87 d1 44 ae b7 95 31-00 9c 67 5c 9e 65 49 23 ...D...1..g\.eI# Start Time: 1790590761 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK
#
OCSP response of
www.circumflex.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.