OCSP Status

What It Does

Performs a TLS handshake to verify the certificate is trusted by Cloudflare's TLS stack, then identifies the CA's OCSP responder URL from known issuer patterns. Detects whether the CA has deprecated OCSP (e.g., Let's Encrypt since August 2025). Note: Direct OCSP queries and stapling detection are not available in this environment. For full revocation checking, use Qualys SSL Labs or a dedicated OCSP client.

Why It's Useful

Certificate revocation checking is in transition. With Let's Encrypt and other CAs moving from OCSP to CRL-based revocation, this endpoint helps identify which domains still rely on OCSP responders and which have transitioned. OCSP stapling verification remains relevant for servers that still support it.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/domain/ocsp" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=example.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/domain/ocsp?domain=example.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/domain/ocsp',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'example.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.