Your files stay on your device

OCSP status checker

Paste a certificate and read the OCSP responder URLs and Must-Staple flag it carries, with a ready openssl command for the live check.

Paste a certificate to read its revocation material.

A browser tab cannot open a raw TLS handshake to an arbitrary host, and OCSP responders do not send CORS headers, so no live probe happens here. That is why this page never states a revocation verdict and always reports stapling as unknown: both facts live on the server, not in the certificate. The openssl command in the result is the next step on a machine with network access, and it verifies the response signature, which a browser page cannot do either.
Options

More web & auth tools

- Certificate & CSR (/web/certificate)
- JWK / JWKS (/web/jwk)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/ocsp-status-checker
Markdown version: https://nutter.tools/web/ocsp-status-checker.md
Plain-text version: https://nutter.tools/web/ocsp-status-checker.txt
Agent index: https://nutter.tools/llms.txt