Certificate Revocation is a process through which we make sure that those certificates that are not considered valid are not used by relying parties.

learn more… | top users | synonyms

1
vote
1answer
20 views

What bits of data is revoked in a CRL? Is it the hash(CSR) or hash(CSR + PKI signature)

My understanding is that a CSR contains the public key from the client, and the response is a signed version of that CSR, with certain attributes (EKU, expiration) and other attributes the CA decides ...
1
vote
0answers
30 views

Specify port for cRLDistributionPoint?

cRLDistributionPoints is OID 2.5.29.31. Here's what one looks like under Gutmann's dumpasn1: SEQUENCE { OBJECT IDENTIFIER cRLDistributionPoints (2 5 29 31) OCTET STRING, encapsulates { ...
1
vote
0answers
54 views

Cetificate Pinning. How do we handle the situation where a website is visited for the first time?

What I essentially mean to ask is, how is the scenario where a user who visits a website for the first time (the certificate for the website is not pinned in the browser) handled ? Additionally how is ...
0
votes
0answers
4 views

Do any certificate revocation schemes revoke certificates issued before a certain date?

In the case of a large number of certificates needing to be revoked, the certificate revocation list may get quite long. This could be difficult to distribute over low bandwidth connections or to ...