Search results
Results from the WOW.Com Content Network
In cryptography, a certificate revocation list (CRL) is "a list of digital certificates that have been revoked by the issuing certificate authority (CA) before their scheduled expiration date and should no longer be trusted".
Since an OCSP response contains less data than a typical certificate revocation list (CRL), it puts less burden on network and client resources. [10]Since an OCSP response has less data to parse, the client-side libraries that handle it can be less complex than those that handle CRLs.
CAs must add a new field, a revocation number, to each issued certificate, allowing certificates from a single CA to be identified by a tuple of certificate expiration date and revocation number; this tuple allows a client to efficiently locate a bit giving the identified certificate's status within the CRV.
X.509 and RFC 5280 also include standards for certificate revocation list (CRL) implementations. Another IETF-approved way of checking a certificate's validity is the Online Certificate Status Protocol (OCSP). Firefox 3.0 enabled OCSP checking by default, as did versions of Windows from at least Vista and later. [9]
The Online Certificate Status Protocol (OCSP) stapling, formally known as the TLS Certificate Status Request extension, is a standard for checking the revocation status of X.509 digital certificates. [1]
In public key infrastructure, a validation authority (VA) is an entity that provides a service used to verify the validity or revocation status of a digital certificate per the mechanisms described in the X.509 standard and RFC 5280 (page 69). [1]
The current date/time is checked against the validity period of the certificate; The revocation status is checked, whether by CRL, OCSP, or some other mechanism, to ensure the certificate is not revoked; The issuer name is checked to ensure that it equals the subject name of the previous certificate in the path;
Certificate revocation list This page was last edited on 21 March 2023, at 14:01 (UTC). Text is available under the Creative Commons Attribution ...