OCSP Response Decoder

Decode OCSP response bytes

OCSP (Online Certificate Status Protocol, RFC 6960) lets clients ask whether a certificate is still valid without downloading a full CRL. Responders return a DER-encoded OCSPResponse structure, often Base64-wrapped when transported over HTTP. Paste PEM or Base64 bytes to view an ASN.1 tree, the top-level responseStatus, and enumerated certificate status hints when present.

Typical workflow

1. Capture the OCSP response from TLS handshake logs, openssl ocsp, or a monitoring probe.
2. Decode locally to confirm successful status and whether single responses report good, revoked, or unknown.
3. Cross-check serial numbers and issuers in your X.509 tooling.

See also X509 Certificate Decoder.