Revoked Certificates - What Is OCSP (Online Certificate Status Protocol)

What Is OCSP (Online Certificate Status Protocol)

Q

What is OCSP (Online Certificate Status Protocol)?

✍: FYIcenter.com

A

OCSP (Online Certificate Status Protocol) is an Internet protocol that allows client systems to communicate with the CA (Certificate Authority) of an X.509 digital certificate to verify the status of the certificate.

When a client system receives an X.509 digital certificate from a server, the client system should first make sure the certificate has not been revoked by the CA.

This can be done by sending an OCSP request to CA's OCSP server. The request contains the certificate's identification. The CA's OCSP server will return the current revocation status of the certificate. If the status says revoked, the certificate should be rejected.

Here is a diagram showing how a client system receives a server certificate and verifies its status using OCSP (source: venafi.com).
Certificate Status Check using OCSP

⇒ Find OCSP Server URL of Certificate CA

⇐ OCSP (Online Certificate Status Protocol)

⇑ OCSP (Online Certificate Status Protocol)

⇑⇑ Revoked Certificates - CRL and OCSP

2016-08-16, 2639👍, 0💬

8gwifi.org OCSP Test Tool
What is 8gwifi.org OCSP test tool? 8gwifi.org OCSP test tool is an online tool that allows to check the status of a certificate with certificate CA's OCSP server. You can follow these steps to try 8gwifi.org OCSP test tool: 1. Go to https://8gwifi.org/ocsp.jsp. 2. Copy and paste the following certif... 2016-08-13, 1799👍, 0💬

Find OCSP Server URL of Certificate CA
How to find the OCSP server URL of certificate's CA? I want to check the status of a certificate using OCSP. If you want to find the OCSP server URL of certificate's CA to check the status of an X.509 certificate, you can follow this tutorial. 1. Open the certificate by double-click the certificate ... 2016-08-16, 1591👍, 0💬

Examples of Revoked Certificates
Where to find examples of revoked certificates? Here are examples of revoked certificates compiled by FYIcenter.com team. DigiNotar Fraudulent Certificates "Hosted by GTI Group Corporation" Certificates Other Examples of Revoked Certificates ⇒ DigiNotar Fraudulent Certificates ⇐ Certificate Revoc... 2019-07-19, 1366👍, 0💬

OCSP (Online Certificate Status Protocol)
Where to find answers to frequently asked questions on OCSP (Online Certificate Status Protocol)? Here is a collection of tutorials on OCSP (Online Certificate Status Protocol) compiled by FYIcenter.com team. What Is OCSP (Online Certificate Status Protocol) Find OCSP Server URL of Certificate CA 8g... 2016-08-16, 990👍, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.