Welcome to OCSP Checker.
Author: coeurl (
@debiru_R
)
This is test page for
OCSP Stapling Test
.
Test URL:
https://xp-plus.jp
Each APIs:
https://ssl.lavoscore.org/api/sslcert-expires/?q=xp-plus.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp-stapling/?q=xp-plus.jp
https://ssl.lavoscore.org/api/sslcert-expires/ocsp/?q=xp-plus.jp
And you can
check your domain name
.
#
Certificate of
xp-plus.jp
{ "serial": "0CED125503867504E470C9AB016A4CF6", "OCSP_serial": null, "OCSP_cert_status": null, "OCSP_this_update": null, "OCSP_next_update": null, "domainName": "xp-plus.jp", "port": 443, "subjectAltName": "DNS:xp-plus.jp", "is_valid": true, "CA": "Amazon", "updated_at": "2026/08/23 09:00:00", "expires_at": "2027/03/09 08:59:59", "today": "2026/09/28 09:11:58", "UTC": { "updated_at": "2026-08-23T00:00:00Z", "expires_at": "2027-03-08T23:59:59Z", "today": "2026-09-28T00:11:58Z" }, "remaining_days": 161 }
#
OCSP response of
xp-plus.jp
from OCSP Stapling
CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN=xp-plus.jp i:C=US, O=Amazon, CN=Amazon RSA 2048 M04 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 23 00:00:00 2026 GMT; NotAfter: Mar 8 23:59:59 2027 GMT 1 s:C=US, O=Amazon, CN=Amazon RSA 2048 M04 i:C=US, O=Amazon, CN=Amazon Root CA 1 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: Aug 23 22:26:35 2022 GMT; NotAfter: Aug 23 22:26:35 2030 GMT 2 s:C=US, O=Amazon, CN=Amazon Root CA 1 i:C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption v:NotBefore: May 25 12:00:00 2015 GMT; NotAfter: Dec 31 01:00:00 2037 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIQDO0SVQOGdQTkcMmrAWpM9jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTA0MB4XDTI2MDgyMzAwMDAwMFoXDTI3MDMwODIzNTk1OVowFTET MBEGA1UEAxMKeHAtcGx1cy5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALk1ifhrfgzqLUj4ynPcSjGvNTW3Px5iqnRABPj2vf4kHFj/lSnqTcunQB2v 9dgZof7tkEQJssKF774+pwGqoRcBsv9w05xtJQeIyknZak+PoRfAOxYQuiiRfHU+ 6oSuVBlFyxUQyu9CyqXBTOX1rU5+GtGZYkeT4cZ5DHvzZZH1x7nhCXy00/aTZ9sl EzFz7+rmzbnbktIRr/SKOJTiv2Xp+WwqKJzMfWAaJzIQj1fP+IGnPMBMX7E7kG9q DqkLxowqMvsvLJYIyVPJl1hBmiq6f6MlrQSPZ1Bo1WWSeR6g//JdgDHgemsNoYW1 I85FaClW/V63F5eTfneSyuypXuECAwEAAaOCAtkwggLVMB8GA1UdIwQYMBaAFB9S kmFWglR/gWbYHT0KqjJch90IMB0GA1UdDgQWBBQJ7mWxzDc9CeI1kDSRdgVaC5HG MTAVBgNVHREEDjAMggp4cC1wbHVzLmpwMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4G A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTA0LmFtYXpvbnRydXN0LmNvbS9yMm0wNC5jcmww dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wNC5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDQuYW1h em9udHJ1c3QuY29tL3IybTA0LmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHW eQIEAgSCAW4EggFqAWgAdgBMY9yY5Zwdq4j2Hoo93q6Pq0SjN3tfm5TD+6Gc/MG+ JgAAAaAsAb1hAAAEAwBHMEUCICULyea1tbSmwelrlVpKHEifIraSX4zSj/gzZonV EmClAiEAjLhw6ydJ2AHcLlBp6uRu9VCsOMIIbqeeot3PQoBgCAgAdwDW1Y2p0BdT 82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAAAaAsAb1NAAAEAwBIMEYCIQDg29PP 399Q3Qwurl+VP0rOcZY9TE21RAalhzhuqwhwIAIhAOiYFQ+t9DpAdaxJWz/xqfyp C+EIrAGG2GbpI/a2qYVpAHUARMK9DOkUDmSlyUoBkwpaobs1lw4A7hEWiWgqHETX tWYAAAGgLAG9igAABAMARjBEAiAmX6p8SBBYTWKMoJL0VpO+2ruqFCp3eYZaVQed oW3WJAIgOzicECwKW0N/1Irjtovde8SF7xek0zg1qtAbQ30dGEEwDQYJKoZIhvcN AQELBQADggEBALP1+5hcAOFkW7D63eaaX0skWg7gccqz6QJh3JmfHYe85X5u7/5w JHRLndUBcpJ7eiQs1BmXEZZm+jYrahHVSwcaVNYHvrKI5OKswkoDVzHSAirpJqhm rGD8HLae8TI3NYCBE+HexLb4WR1zwB5Hd5Yv1ybWwqTwVbB51UWSMw+YByqknRln V+exAxRBgT1NTN4KCXjUQhtbpuLmf/wHkwq/SSxPCPCN+EIs2ICHloXozVUqtAV5 FzG/XYJLZfBFIQHF0Uat6Kkcq0PPjfZLI581WJ/nYr+/IQw462r2oGq7ZmAnPfH3 HzD2PqPPGwcr07rxWkJyOrHLLZF14iePVUA= -----END CERTIFICATE----- subject=CN=xp-plus.jp issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M04 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: rsa_pss_rsae_sha256 Peer Temp Key: X25519, 253 bits --- SSL handshake has read 4316 bytes and written 1625 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Protocol: TLSv1.3 Server public key is 2048 bit This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
#
OCSP response of
xp-plus.jp
from OCSP responder (Let's Encrypt)
OCSP response from OCSP responder allows only Let's Encrypt's Certificate.