# OCSP response of `www.domitori.jp` from OCSP Stapling

CONNECTED(00000003)
OCSP response:
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = R3
    Produced At: Apr 24 21:12:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4
      Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6
      Serial Number: 0372605614B86953510B3C6C7577454009DB
    Cert Status: good
    This Update: Apr 24 21:12:00 2024 GMT
    Next Update: May  1 21:11:58 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a6:5e:63:ff:a6:84:19:dc:d7:e0:32:3e:29:d6:64:4a:a7:70:
        93:51:4a:10:f6:57:33:7d:d7:f3:7b:d8:09:57:4f:da:75:e4:
        5c:14:d0:0e:22:56:b7:ee:2b:a3:14:02:5e:b7:16:56:19:97:
        03:8a:eb:a2:a4:06:d5:7b:74:4d:d5:3f:c6:d6:cb:ea:be:de:
        29:db:ed:6f:6f:df:a3:aa:a2:b8:5a:e6:9b:8e:6c:6e:96:e8:
        5b:0a:49:af:04:c6:33:38:10:6f:76:29:a0:a0:d9:b7:1c:e6:
        32:b8:58:c2:d5:e0:b5:26:f2:bf:cb:14:37:51:d1:f4:18:2f:
        a0:ec:3d:4b:c4:0b:27:18:86:88:34:03:89:33:c7:81:88:12:
        40:0c:6f:fe:c5:cf:ac:47:0a:4e:41:73:6f:90:84:e5:ba:ab:
        69:8d:d3:ad:32:cc:a8:84:aa:27:01:10:b2:4a:e4:f9:9c:c2:
        87:93:63:6a:c8:02:2c:cb:92:af:f3:d5:95:38:f7:84:b4:60:
        37:87:c3:27:26:fd:c8:1c:f1:57:93:89:29:76:79:04:ea:2e:
        96:4d:a6:78:2c:31:ae:27:df:63:da:39:cc:92:e8:59:eb:b7:
        f4:6e:33:e3:7e:69:57:f5:e9:41:d1:50:e5:b6:67:ab:ae:3f:
        b2:17:78:3a
======================================
---
Certificate chain
 0 s:CN = www.domitori.jp
   i:C = US, O = Let's Encrypt, CN = R3
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256
   v:NotBefore: Mar 22 13:45:02 2024 GMT; NotAfter: Jun 20 13:45:01 2024 GMT
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIEIDCCAwigAwIBAgISA3JgVhS4aVNRCzxsdXdFQAnbMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjIxMzQ1MDJaFw0yNDA2MjAxMzQ1MDFaMBoxGDAWBgNVBAMT
D3d3dy5kb21pdG9yaS5qcDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJ+Xcxvc
mK4quGuiuORkSz4UbLThXdd2zBApj9hqYgR39rgqjSm6vsJm+EcrCf99K0UsrA0c
ZX219XcLevvfMaCjggIRMIICDTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDg2hIh5
WO7yynzDmUVp/+lHZUQtMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG
MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu
b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBoGA1UdEQQT
MBGCD3d3dy5kb21pdG9yaS5qcDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs
+GRuAAABjmafWc0AAAQDAEYwRAIgK8J5VNBthzUmR6wU2fPov9hpJHdQHr2+pt8g
/E96OQ4CIBH+NC6k1xV+ssNd8stfzysgdHSvNO/7E3debiy3ikiqAHcAouK/1h7e
Ly8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGOZp9Z5gAABAMASDBGAiEA4Fr/
v/UnCWohoeK+HgLdVnKHxrQ6nnY35Hhi/PxT/AQCIQDNvn/RWshpCGa5q8CQ6BYn
NtLzX/ZmJdbiqtvukPT31DANBgkqhkiG9w0BAQsFAAOCAQEATAbBCI7pO4z+F+66
uqcxBgpza/HZtlD0QRFMmQ5yVbbfJmtN7u/QsuY9phK4hXKNi7VOk+vRXT+6Kjwz
//uwkvWiMIvmJyWAlDTujwkzyV1IyNN6xde/YL3BBOpViFjIGY6poYNTRgfwqptR
P31r5IdM0SZlAV6FDYhBxvB0vPqE1OTNM46m03IM1yfi30iYzjxtZVri08Y8HNfp
qFC7/VsdCBB0VCLF4KwQ2Zxm3/FPNZoblI8V1bJ0IFj/4Jj8bmnOkFNUsdsmxeAn
cGcO29T9g4z/DhrgE8NxKkZn0RtYRIqGCORDmJteszy6g9RNnTrYGBF77o+Y5JJB
yHpB/w==
-----END CERTIFICATE-----
subject=CN = www.domitori.jp
issuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3238 bytes and written 390 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_128_GCM_SHA256
    Session-ID: 2640FB3B4D416C40BA3CF260F64CC9357AD418C76B0CC14E2BC07DF8502D11AA
    Session-ID-ctx:
    Resumption PSK: B863FAA0D9D7EC085E6733E4EDB3C6EEFDEBF3F04B075F052684C5BAFD68DA24
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 604800 (seconds)
    TLS session ticket:
    0000 - 4c 0f 3b d1 13 f2 c0 e6-7d 88 a9 95 d6 37 9e 18   L.;.....}....7..
    0010 - 20 e6 73 12 b3 b0 39 52-0a 0b 6e 13 bc bb 24 6d    .s...9R..n...$m
    0020 - 65 33 fd 01 73 1d 90 18-f6 69 54 a5 18 89 08 ce   e3..s....iT.....
    0030 - 36 63 8d 0c a9 24 06 bf-88 ed dd c4 87 7c 59 8a   6c...$.......|Y.
    0040 - 9e ea fe c1 8a c1 54 98-3d b4 68 29 e4 e1 f0 18   ......T.=.h)....
    0050 - 66 e7 85 b7 18 96 60 1e-34 79 fd 77 1b 64 fa 89   f.....`.4y.w.d..
    0060 - 1e 89 36 3f 30 10 af ff-8a 03 b0 e7 48 1a ac 7f   ..6?0.......H...
    0070 - cc                                                .

    Start Time: 1714277704
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK

# OCSP response of `www.domitori.jp` from OCSP responder (Let's Encrypt)

OCSP Request Data:
    Version: 1 (0x0)
    Requestor List:
        Certificate ID:
          Hash Algorithm: sha1
          Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4
          Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6
          Serial Number: 0372605614B86953510B3C6C7577454009DB
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = R3
    Produced At: Apr 27 20:31:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4
      Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6
      Serial Number: 0372605614B86953510B3C6C7577454009DB
    Cert Status: good
    This Update: Apr 27 20:31:00 2024 GMT
    Next Update: May  4 20:30:58 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b8:5e:08:e2:61:8c:85:bf:44:dc:43:86:98:58:ea:39:4a:72:
        d1:23:d0:46:d0:f5:ce:bb:b2:9d:8e:98:4a:b0:e4:e4:db:39:
        40:d5:6e:7b:d8:28:21:28:57:c7:e2:37:46:47:20:65:e9:76:
        6e:e2:41:07:01:3a:c4:39:c5:59:d3:82:4a:cc:9f:1d:8b:26:
        a5:a3:7e:0b:39:66:b5:8e:1a:f9:8c:ec:e1:9e:3d:59:66:1b:
        d9:2a:e1:64:9c:e8:bd:36:41:ea:cd:e6:23:bb:ac:bb:af:e3:
        c7:29:69:05:28:ab:2b:90:40:ce:ee:7d:64:13:4d:53:73:f3:
        1f:f9:a5:3a:21:03:2f:80:4c:5e:ad:14:5b:8d:8b:12:a0:07:
        28:db:a1:d8:15:e0:57:71:93:52:8e:b2:5a:e7:03:83:33:f7:
        2a:eb:9b:4c:b8:99:66:8e:99:25:4b:eb:61:37:6a:27:5e:b3:
        6a:45:f1:40:ce:84:fc:2a:c4:31:13:bf:74:bc:24:25:79:50:
        00:fc:23:0f:1b:69:3d:cb:27:30:87:c5:a8:68:71:09:45:d9:
        db:38:6c:74:1b:61:48:ac:44:f8:eb:a4:01:06:12:e7:6d:83:
        27:ed:d1:04:a8:f7:f0:cc:c7:bf:06:08:0e:67:bf:26:82:07:
        66:cf:39:1a
0x0372605614b86953510b3c6c7577454009db: good
	This Update: Apr 27 20:31:00 2024 GMT
	Next Update: May  4 20:30:58 2024 GMT

Welcome to OCSP Checker.

# Check OCSP Stapling and OCSP (from Responder)

# Certificate of `www.domitori.jp`

# OCSP response of `www.domitori.jp` from OCSP Stapling

# OCSP response of `www.domitori.jp` from OCSP responder (Let's Encrypt)

Welcome to OCSP Checker.

# Check OCSP Stapling and OCSP (from Responder)

# Certificate of www.domitori.jp

# OCSP response of www.domitori.jp from OCSP Stapling

# OCSP response of www.domitori.jp from OCSP responder (Let's Encrypt)

# Certificate of `www.domitori.jp`

# OCSP response of `www.domitori.jp` from OCSP Stapling

# OCSP response of `www.domitori.jp` from OCSP responder (Let's Encrypt)