Categories:
Android (13)
Apple Mac (27)
DH Keys (39)
DSA Keys (69)
EC Keys (577)
Firefox (31)
General (12)
Google Chrome (25)
Intermediate CA (152)
Java VM (33)
JDK Keytool (28)
Microsoft CertUtil (29)
Microsoft Edge (9)
Mozilla CertUtil (22)
OpenSSL (237)
Other (7)
Portecle (38)
Publishers (2706)
Revoked Certificates (30)
Root CA (89)
RSA Keys (2231)
Tools (46)
Tutorial (3)
What Is (22)
Windows (129)
Collections:
Other Resources:
What Is OCSP (Online Certificate Status Protocol)
What is OCSP (Online Certificate Status Protocol)?
✍: FYIcenter.com
OCSP (Online Certificate Status Protocol) is
an Internet protocol that allows client systems to communicate
with the CA (Certificate Authority) of an X.509 digital certificate
to verify the status of the certificate.
When a client system receives an X.509 digital certificate from a server, the client system should first make sure the certificate has not been revoked by the CA.
This can be done by sending an OCSP request to CA's OCSP server. The request contains the certificate's identification. The CA's OCSP server will return the current revocation status of the certificate. If the status says revoked, the certificate should be rejected.
Here is a diagram showing how a client system receives a server certificate
and verifies its status using OCSP (source: venafi.com).
Â
⇒ Find OCSP Server URL of Certificate CA
⇠OCSP (Online Certificate Status Protocol)
2016-08-16, 5154👍, 0💬
Popular Posts:
How to view general information of a root CA certificate in IE? I want to know when is the expiratio...
What can I use OpenSSL "s_client" command for? What are options supported by the "s_client" command?...
Are you having Internet security certificate problems with a Web browser or an application? Welcome ...
Why I am getting this "SunCertPathBuilderExcep tion"error for my Java application? The error message...
Certificate summary - Owner: GlobalSign Organization Validation CA, GlobalSign, Organization Validat...