SSL OCSP Checker

Check certificate revocation status via Online Certificate Status Protocol

Querying OCSP responder...

About OCSP Checker

Our free OCSP Checker queries the Online Certificate Status Protocol responder to check real-time certificate revocation status. Get instant revocation status without downloading entire CRL files.

How to Use

1Paste the certificate PEM text to check.
2Click "Check OCSP" to query the OCSP responder.
3View the revocation status (good, revoked, or unknown).

Use Cases

•Real-time certificate revocation check
•Verify OCSP stapling configuration
•Audit certificate status
•Compliance verification

Technical Details

Protocol

OCSP (RFC 6960)
Real-time certificate status

Response Types

Good, Revoked, Unknown
Server-side stapling supported

Tips & Best Practices

•Use OCSP for real-time revocation checks — faster than CRL
•Enable OCSP stapling on your server for better performance
•Unknown status may indicate a recently issued certificate not yet in the responder

Frequently Asked Questions

Online Certificate Status Protocol provides real-time certificate revocation status without downloading entire CRLs.

The certificate is not revoked and is currently valid according to the CA's OCSP responder.

The server caches and delivers the OCSP response during the TLS handshake, improving privacy and performance.

Video Tutorial

Video tutorial coming soon