Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://www.thisisyr.com
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=www.thisisyr.com
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=www.thisisyr.com
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=www.thisisyr.com
And you can
check your domain name
.
#
Certificate of
www.thisisyr.com
{ "serial": "E48F7829EAB4D73013E8B84BB4D4A7F9", "OCSP_serial": "E48F7829EAB4D73013E8B84BB4D4A7F9", "OCSP_cert_status": "good", "OCSP_this_update": "Sep 2 22:04:02 2024 GMT", "OCSP_next_update": "Sep 9 21:04:01 2024 GMT", "domainName": "www.thisisyr.com", "port": 443, "subjectAltName": "DNS:thisisyr.com, DNS:*.thisisyr.com", "is_valid": true, "CA": "Google Trust Services", "updated_at": "2024/08/29 05:43:43", "expires_at": "2024/11/27 05:43:42", "today": "2024/09/08 11:37:58", "UTC": { "updated_at": "2024-08-28T20:43:43Z", "expires_at": "2024-11-26T20:43:42Z", "today": "2024-09-08T02:37:58Z" }, "remaining_days": 79 }
#
OCSP response of
www.thisisyr.com
from OCSP Stapling
CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: 9077923567C4FFA8CCA9E67BD980797BCC93F938 Produced At: Sep 2 22:04:02 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: B9BED5F1A61E40B24196B0C29E7E1A9D8BFCB520 Issuer Key Hash: 9077923567C4FFA8CCA9E67BD980797BCC93F938 Serial Number: E48F7829EAB4D73013E8B84BB4D4A7F9 Cert Status: good This Update: Sep 2 22:04:02 2024 GMT Next Update: Sep 9 21:04:01 2024 GMT Signature Algorithm: ecdsa-with-SHA256 Signature Value: 30:46:02:21:00:c0:ab:20:2a:3a:be:46:c0:91:dc:82:b6:17: 38:cc:89:20:70:39:32:2f:12:6b:fc:25:db:14:2c:03:d5:ff: c0:02:21:00:f7:be:c3:3c:d0:78:be:f0:15:34:b0:79:e5:fc: cb:6d:52:4a:cb:24:e6:12:55:b1:e1:08:16:41:3a:22:18:cc ====================================== --- Certificate chain 0 s:CN = thisisyr.com i:C = US, O = Google Trust Services, CN = WE1 a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA256 v:NotBefore: Aug 28 20:43:43 2024 GMT; NotAfter: Nov 26 20:43:42 2024 GMT 1 s:C = US, O = Google Trust Services, CN = WE1 i:C = US, O = Google Trust Services LLC, CN = GTS Root R4 a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA384 v:NotBefore: Dec 13 09:00:00 2023 GMT; NotAfter: Feb 20 14:00:00 2029 GMT 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R4 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256 v:NotBefore: Nov 15 03:43:21 2023 GMT; NotAfter: Jan 28 00:00:42 2028 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIDpzCCA0ygAwIBAgIRAOSPeCnqtNcwE+i4S7TUp/kwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI0MDgyODIwNDM0M1oXDTI0MTEyNjIwNDM0MlowFzEVMBMG A1UEAxMMdGhpc2lzeXIuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELQgk evSpzS1fXGGuYaUW6ctKAOwsNZZM04WHGkLP951wKVgJe9FlyMMH6Yevh/jfxefm MuXrDp6YweUrrfmkbKOCAlMwggJPMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAK BggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQNISUoJhdgo3outgl8 MXrd4Ic0gTAfBgNVHSMEGDAWgBSQd5I1Z8T/qMyp5nvZgHl7zJP5ODBeBggrBgEF BQcBAQRSMFAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vLnBraS5nb29nL3Mvd2UxLzVJ ODAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdvb2cvd2UxLmNydDAnBgNVHREE IDAeggx0aGlzaXN5ci5jb22CDioudGhpc2lzeXIuY29tMBMGA1UdIAQMMAowCAYG Z4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dlMS9B SFdoUDdadmZlSS5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDatr9rP7W2 Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAZGa8c6eAAAEAwBGMEQCICcpHJ0M BV3n/nt6+Eb8bqSjykl2igmwtfGGJv/Skcc7AiBaZ8CxVuY07j7HWfpIbdQ+JL2q /fk767lN3e34xgb/YgB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0 AAABkZrxzpsAAAQDAEYwRAIgYKAwtGABFmV06NuHIs9PWPjx28nnMIsFcKvL2DMm gXwCIH8qre96dLv9MgAe04HafakQDCYELVd2sAUsG9ULTAwDMAoGCCqGSM49BAMC A0kAMEYCIQCqNfEeM1zD+vAADe9JWWmQCe7aDHawliZaiw6ZY9gVawIhAI1YlprT 60yZmmPPvuvyAbzLRYmJ8CV/lDDi1dCf7K5Z -----END CERTIFICATE----- subject=CN = thisisyr.com issuer=C = US, O = Google Trust Services, CN = WE1 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits --- SSL handshake has read 3115 bytes and written 407 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
www.thisisyr.com
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.