Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.ihep.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.ihep.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.ihep.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.ihep.jp
And you can
check your domain name
.
#
Certificate of
www.ihep.jp
{ "serial": "08754C810CBF86D5AB6B6822B68DBF7F", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.ihep.jp", "port": 443, "subjectAltName": "DNS:www.ihep.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2025/05/05 09:00:00", "expires_at": "2026/06/05 08:59:59", "today": "2025/05/09 22:30:21", "UTC": { "updated_at": "2025-05-05T00:00:00Z", "expires_at": "2026-06-04T23:59:59Z", "today": "2025-05-09T13:30:21Z" }, "remaining_days": 391 }
#
OCSP response of
www.ihep.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = www.ihep.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M03 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 5 00:00:00 2025 GMT; NotAfter: Jun 4 23:59:59 2026 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M03 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:26:04 2022 GMT; NotAfter: Aug 23 22:26:04 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIQCHVMgQy/htWra2gito2/fzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI1MDUwNTAwMDAwMFoXDTI2MDYwNDIzNTk1OVowFjEU MBIGA1UEAxMLd3d3LmloZXAuanAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDGgDGFxTvxq54jhrFC+G4I3OEnvLpZ98TIjPBDlU8/YPPNgFwjXjSlRYJX xrZ01akV8x3ZAUMpYanGIuKj1VtKbO2y5IrUjorTYJPRsyw80Y3M8/lkSnzBid5o Fp5naVf60BTWDMmgueUUgwG9BR7M4qqM0G+eYHMZYMElIygYqzT6NOpmJgSQJLdE s288Gys8zxFG+PiS7vAzJdtMnaSJLcCcrueaj2jKCkPrNu3Car7cogHu8kLvWjTW BiriZovMx20LShOCwiw9CbXCD3bFnJVsn/b/3glaW8e41O+78YXZXJOSc7mTkBdu M7RgnUzEVWxC3PFstUH3Y5oP/rylAgMBAAGjggLmMIIC4jAfBgNVHSMEGDAWgBRV 2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUDlnw+YJc84QZ9co9ZaUcJwT2 pScwFgYDVR0RBA8wDYILd3d3LmloZXAuanAwEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA MIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwCWl2S/VViXrfdDh2g3CEJ36fA6 1fak8zZuRqQ/D8qpxgAAAZad31riAAAEAwBIMEYCIQD0NNl7t8WGdudsUufKT9J2 XtBu+MorjyvRJa6qkapGIgIhAKH7UDuZ60kT7vtofF4TZyNgaIB/o1lPfH7mSvPT ozO3AHYASZybad4dfOz8Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MMAAAGWnd9a6wAA BAMARzBFAiAhFZ2yHMO5go7eBqT1sRQR+n1fc1x77UrAr8Q+9dG7qgIhAKrAo33z 1cjuZ9hYqkmYF0tPqTrTjCP/FwBoHeifSdFOAHcAyzj3FYl8hKFEX1vB3fvJbvKa Wc1HCmkFhbDLFMMUWOcAAAGWnd9a8QAABAMASDBGAiEAyPMl36h9lW/VTH01tJDy 2brFR3gAlaWBm3//vtqgQfUCIQDWPzCHrS/LgpWWOLpmFCslU1Ir+T3wJj3jPoOw 6qrLIDANBgkqhkiG9w0BAQsFAAOCAQEAlGDG42KNRpiMgHeBCiiolaMH4jPxBdrz p0hQk4grt/fvpNtdWFeVzWu9f8fZNcCaTZ+TLnx0NAbM9RFke+OBuiPc7qx08yC/ R2SEUojyyIUl+bc2MdCG35tMIyTuOyigYKy1xxIbCCH2aVDvoOSN5hbDTdxkldPm 0NEHH3S+qmnKs2hHivXWvrJ1MPhUjc+6CWrNrSYYwtN0KtxmuRUUtTFGQp5ea3Jg uNbRXbthD2ZCQZr5IHkprtEM0Oy9RZ13eL2Pcm8ZxtR91Fc7l/C+WnUSBHMrOcnV cg0OmWRuDMvXrK8c4nbSvs74dOpceiX1FnbyWv07SkicNdpy0MGdKg== -----END CERTIFICATE----- subject=CN = www.ihep.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M03 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4452 bytes and written 448 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 85C8E13B6892860920303740ECA7BDD513CCD8D7C84BE7B238C475F7C76EB5AC Session-ID-ctx: Master-Key: 1B8DEBF8F94444A4CFAD85A66C8F04B1FB596CE6285EC5153E91F201DD0F69BA8DF83BAB9956A71CA024144C80582CA6 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 01 d2 db 6b b3 20 81 57-4b a3 fa 95 f5 31 70 98 ...k. .WK....1p. 0010 - fc e0 fa b1 1d 67 45 72-1f e8 df 41 64 c8 52 6f .....gEr...Ad.Ro 0020 - 8d 11 87 33 1d 49 82 fc-04 ec e2 2a b0 68 df d7 ...3.I.....*.h.. 0030 - 8b 43 b9 ee 7d fe ca 0d-d4 80 b8 e1 94 ca 11 c8 .C..}........... 0040 - 45 ec 5f eb 99 78 df 94-7b 1d 16 cc ac b3 f3 ee E._..x..{....... 0050 - ec 1f 66 d1 81 16 68 a2-ed fb 67 45 78 82 61 a7 ..f...h...gEx.a. 0060 - e6 81 fd ce 13 e4 d4 39-55 1c 29 c0 45 d7 47 dc .......9U.).E.G. 0070 - 14 2c 53 9e 6d 16 51 da-05 c4 e6 22 6c 1f 67 50 .,S.m.Q...."l.gP 0080 - 9a c3 ea 8c cd 6c f6 42-08 fc .....l.B.. Start Time: 1746797423 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
www.ihep.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.