Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.kepura.com
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.kepura.com
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.kepura.com
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.kepura.com
And you can
check your domain name
.
#
Certificate of
www.kepura.com
{ "serial": "0EB12C54D712CBEC72074934D8F8FAE1", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.kepura.com", "port": 443, "subjectAltName": "DNS:*.kepura.com, DNS:kepura.com", "is_valid": true, "CA": "Amazon", "updated_at": "2026/02/13 09:00:00", "expires_at": "2027/03/15 08:59:59", "today": "2026/09/28 11:11:30", "UTC": { "updated_at": "2026-02-13T00:00:00Z", "expires_at": "2027-03-14T23:59:59Z", "today": "2026-09-28T02:11:30Z" }, "remaining_days": 167 }
#
OCSP response of
www.kepura.com
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN=*.kepura.com i:C=US, O=Amazon, CN=Amazon RSA 2048 M01 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Feb 13 00:00:00 2026 GMT; NotAfter: Mar 14 23:59:59 2027 GMT 1 s:C=US, O=Amazon, CN=Amazon RSA 2048 M01 i:C=US, O=Amazon, CN=Amazon Root CA 1 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 23 22:21:28 2022 GMT; NotAfter: Aug 23 22:21:28 2030 GMT 2 s:C=US, O=Amazon, CN=Amazon Root CA 1 i:C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIQDrEsVNcSy+xyB0k02Pj64TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTI2MDIxMzAwMDAwMFoXDTI3MDMxNDIzNTk1OVowFzEV MBMGA1UEAwwMKi5rZXB1cmEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwn2m+iye2KBS2BBtL1jE8N1iCA8Xwr3JxuHRF0izDUdqvhgo2NNyUZk8 4G50Oy7OqJzQ518iVkVGIKzUkUwsSFTZGoAbpg/ltyYPju4wyHRiixjnnZMEXjZk lowsqqPJYTUqNfKYL+28pC/67m11YQ5dAMyIIiBhQUrs+29tXSkUXCtJZWWKnZ+n PdEo6o7z6ryvQMCNTMN4mbY+r99FNMPbydGSceeTttG6V4sFozb3iGMkA9i7H/6a kz+vwegp+fmQ6j84okD9QXxhW5FUcU7BYK6cN7Kv/Kq9Kh7A/co53aIacBHsEvWo moBOxknZzsQz7eo62Syem9ncdN+YCwIDAQABo4IC7jCCAuowHwYDVR0jBBgwFoAU gbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFOOvh1K97RwRJQdlizWlnblt 7Wu6MCMGA1UdEQQcMBqCDCoua2VwdXJhLmNvbYIKa2VwdXJhLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVz dC5jb20vcjJtMDEuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/ BAIwADCCAYUGCisGAQQB1nkCBAIEggF1BIIBcQFvAHUATGPcmOWcHauI9h6KPd6u j6tEozd7X5uUw/uhnPzBviYAAAGcVGU4HAAABAMARjBEAiBUNk3fClSqWdxNhcsd +pqrJe4UqgnuAZ9yVGh85Fp21QIgEhTfX3ADmfgn8i9CpdjPK/FgTeAsRZoQTqn4 WpS7uiMAdgAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9ZnwAAAZxUZTg6 AAAEAwBHMEUCIHWdb2gxS7PJmccU5/5Y4vQVraS6wQRi1ZCt4HcIJvT4AiEA/yDk N+s4gVAPntyb1Ztv5y/F8sab+Udy4Y+m9e4lfngAfgCOykcLrN5q86IGsKR6hLdG /h/Gv5U+JeabTuQCSPPG6AAAAZxUZTjNAAgAAAUAAqmTNwQDAEcwRQIgVBC1Ev4g MQUeDgxwkatSeuHpdziW/nJXdDxSHi4K6ZgCIQDA86gI1VHv2/YtU5tpGeoKjRmw xshmVxpa6cfDMDTj8zANBgkqhkiG9w0BAQsFAAOCAQEAov9pVc5EPlwYMcbAOZLj cCUyd0NHI8BtW42CLSbSqV+f60wYyynWJegqTnHyfW9dQGekh9KQNlILwl0uDYGC waJZQ4nOJl/4diLxkpsE2zFuaFTBrSIIrcW3sO2Nj/sz9hai40iaRRv4Ej4QkVtv FMKQjWQOtdl9wDWmZsfXNvLcYDUTyZfgd8Zit85IWuf55D5yc5FY/Z+X1VQSzoq5 vyd8SbphiErDHHoh1LrVRbIxfjsuEbs5Tc8rohjTK/64aNGbLHuQbWHZ4cW2WmvR MPjsXjkY/0GOna+79EP4nAmI6+qRCtuydc7W84wxJiKaZIKuaH/HFvEkli2BYETt +Q== -----END CERTIFICATE----- subject=CN=*.kepura.com issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M01 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: rsa_pkcs1_sha256 Peer Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 4461 bytes and written 1691 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Protocol: TLSv1.2 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: C486BBC6C87E1D1CCF67668EA2F2233D5206278B31558ED1384D20CABF0AF629 Session-ID-ctx: Master-Key: 5972DD389B4947A5E15EECC619A2C1B93AFD180F4D3503383466EFEF56E7E61503363909F94A2C51AE1437ECEE81EB74 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 77858 (seconds) TLS session ticket: 0000 - 01 fa 47 a1 af fb 38 91-55 8d 50 a0 3f 84 83 7f ..G...8.U.P.?... 0010 - 64 9c ce 54 cd 06 e6 0c-cb a8 09 8b 06 66 c6 9d d..T.........f.. 0020 - b4 b3 4d bc 93 4e 5a 7e-5c 9b 8b 82 25 0f 27 d0 ..M..NZ~\...%.'. 0030 - e1 5e 35 21 56 d3 50 14-b4 a4 d9 b8 15 d1 9e 9d .^5!V.P......... 0040 - 37 51 74 d7 97 67 cb 07-19 c4 a6 75 1e 17 fa 26 7Qt..g.....u...& 0050 - ed 78 c9 65 1e ff 1d 61-95 3a 5f 90 7e f8 68 26 .x.e...a.:_.~.h& 0060 - c6 d4 67 27 ad f2 af c7-8d 68 23 cc ac aa 7e 96 ..g'.....h#...~. 0070 - 1b 07 3e ec 73 10 0d d9-74 fb 31 3e f2 82 2e ad ..>.s...t.1>.... 0080 - f8 43 a1 a9 c4 3c dc 31-b8 f9 .C...<.1.. Start Time: 1790561490 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
www.kepura.com
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.