Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.sustainability.k.u-tokyo.ac.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.sustainability.k.u-tokyo.ac.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.sustainability.k.u-tokyo.ac.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.sustainability.k.u-tokyo.ac.jp
And you can
check your domain name
.
#
Certificate of
www.sustainability.k.u-tokyo.ac.jp
{ "serial": "0E66B2EF6CF77E3B07F001C261C3C156", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "www.sustainability.k.u-tokyo.ac.jp", "port": 443, "subjectAltName": "DNS:k.u-tokyo.ac.jp, DNS:sustainability.k.u-tokyo.ac.jp, DNS:*.k.u-tokyo.ac.jp, DNS:*.sustainability.k.u-tokyo.ac.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2023/09/15 09:00:00", "expires_at": "2024/10/15 08:59:59", "today": "2024/04/28 21:58:51", "UTC": { "updated_at": "2023-09-15T00:00:00Z", "expires_at": "2024-10-14T23:59:59Z", "today": "2024-04-28T12:58:51Z" }, "remaining_days": 169 }
#
OCSP response of
www.sustainability.k.u-tokyo.ac.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = k.u-tokyo.ac.jp i:C = US, O = Amazon, CN = Amazon RSA 2048 M03 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 15 00:00:00 2023 GMT; NotAfter: Oct 14 23:59:59 2024 GMT 1 s:C = US, O = Amazon, CN = Amazon RSA 2048 M03 i:C = US, O = Amazon, CN = Amazon Root CA 1 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Aug 23 22:26:04 2022 GMT; NotAfter: Aug 23 22:26:04 2030 GMT 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT 3 s:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 i:C = US, O = "Starfield Technologies, Inc.", OU = Starfield Class 2 Certification Authority a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 2 00:00:00 2009 GMT; NotAfter: Jun 28 17:39:16 2034 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIQDmay72z3fjsH8AHCYcPBVjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMDkxNTAwMDAwMFoXDTI0MTAxNDIzNTk1OVowGjEY MBYGA1UEAxMPay51LXRva3lvLmFjLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAjuS5jHntBISxim1HZ+5f6M0zyaxm9AQKxVeD+a0GcWWV7IL0GoJ6 oQtIB/7jOeKvPvJ45/IAWtrTquE7dkhA5hQWhkEYYjy1YS/FxkCirkp1xGqSdNT7 vqBnOh0rhcF0tWX3YtPyuedGpHEXVvfMpaxYWtw/8SVut52+xM6IjU53snmo+O5f 9kMT9VlbNU6sfpyr9Hnvxx0Xg5AWII4nT1xN0AAMMUyPlqBFoe0Rat3yzP1NjjLQ AqWdjiKPqgqh9D2z6q+FL1HpAdWSmVDFtOvQI/PUsu197M4FY25c4KuIrUXDLG+v 4rXnqMCPkoNnxO3ZD8rLGIKUmAQCnf8MLwIDAQABo4IDPjCCAzowHwYDVR0jBBgw FoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFKqOkmL5CVJG3stgxfXM TyfRAgSOMG8GA1UdEQRoMGaCD2sudS10b2t5by5hYy5qcIIec3VzdGFpbmFiaWxp dHkuay51LXRva3lvLmFjLmpwghEqLmsudS10b2t5by5hYy5qcIIgKi5zdXN0YWlu YWJpbGl0eS5rLnUtdG9reW8uYWMuanAwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9y Mm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIB fwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuync aEIKn+ZnTFo6dAAAAYqXBViCAAAEAwBHMEUCIApDtjXbfh/iWsyhh2v8oM5u7n3A siSh3S4fJm6jwvMbAiEA0K2uI5gm5Y47K6yVnpmWuKXmr/k/fcQP2cStA2HE+U0A dgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYqXBVh8AAAEAwBH MEUCIQDg/nUS7QpUax7kG6P0J2/fISxEDYm95oucGZQceNnFjQIgJ4OGA3cIs+Fd CcNyp38k+JzskzqHnGR92Z1UgYfnM1AAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GE hTS9pD0wSNf7qwAAAYqXBVhrAAAEAwBIMEYCIQDNNBVTduA7Sr8RrrJSChvdMhUA dTYTBbw/uxZMxvkUOAIhAJkIKAvlW/BEXF+DXfAXfUutfL8PpUFwb2D1k1F60SWh MA0GCSqGSIb3DQEBCwUAA4IBAQA11DB2uXOWUA10Q44W/b53Cc52/qvo2G0LJU51 TgklIUwPI9XKWhdMHlud8VoC/XBREYEIahfQeeJJqmJGmQye8S7Mhx2VzZrbcUdX OF5iyS+Tb2CSaCqa5MKIWNSkiFA6TsMXcUKYltTn/SbQHTMsQjIlkudZFJFSgUrv releW2OU0HAkWcLIqWIhgFTQR6w6/MDsLA2YZ7zbbsybP8b85Y+WgGg0Zx8+8EGW gZt38bqe2N1z8+vv0ElgygRUk+MuLpABqInZpT5/0LjCKp3HDT34aaCmk6069CFG njd+MNY0nF2n/2ceW6hvW/dKAgmvpErfx5bOzIXZGJuucKXS -----END CERTIFICATE----- subject=CN = k.u-tokyo.ac.jp issuer=C = US, O = Amazon, CN = Amazon RSA 2048 M03 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, prime256v1, 256 bits --- SSL handshake has read 5659 bytes and written 471 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 30A64C3D8A08DB2E8451603A27207A6AB35FE63AE05433DEEE5BEF232DB873B5 Session-ID-ctx: Master-Key: 11BA877C479BCA041656183058A9EA4271F1FC902223B79798CFD4C2E77E2CD8154E4606D133DA685BB349966B638C2C PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 86400 (seconds) TLS session ticket: 0000 - 51 48 2f 98 56 cc ad 9d-87 dd 0d 10 c1 87 4a 6a QH/.V.........Jj 0010 - 30 8e 91 99 4c 3c ea b1-ec 70 de 90 ec 83 d9 0d 0...L<...p...... 0020 - 54 a3 1f 30 19 86 06 53-54 5e 8e 62 38 23 12 6d T..0...ST^.b8#.m 0030 - 21 32 ba 77 ec 86 a9 60-6e 00 f1 d8 da fd 65 14 !2.w...`n.....e. 0040 - 28 9e 55 ca 0a 48 ed 7b-18 13 04 0a 05 90 fa c0 (.U..H.{........ 0050 - 6b b4 86 94 91 f8 68 86-b4 9d 85 84 0a 01 d0 6f k.....h........o 0060 - c2 c6 c1 9b c5 ec 6f 35-e3 ......o5. Start Time: 1714309131 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes ---
#
OCSP response of
www.sustainability.k.u-tokyo.ac.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.