Certificate Revocation is a process through which we make sure that those certificates that are not considered valid are not used by relying parties.

learn more… | top users | synonyms

1
vote
0answers
33 views

Specify port for cRLDistributionPoint?

cRLDistributionPoints is OID 2.5.29.31. Here's what one looks like under Gutmann's dumpasn1: SEQUENCE { OBJECT IDENTIFIER cRLDistributionPoints (2 5 29 31) OCTET STRING, encapsulates { ...
1
vote
0answers
57 views

Cetificate Pinning. How do we handle the situation where a website is visited for the first time?

What I essentially mean to ask is, how is the scenario where a user who visits a website for the first time (the certificate for the website is not pinned in the browser) handled ? Additionally how is ...
0
votes
0answers
11 views

How to generate “CRL numbers” for X.509 CRL

(Context: I'm working a process to publish a CRL periodically -- eg once every day.) With standard X.509 certificates, "serial numbers" are required to be positive integers, but they do not need to ...
0
votes
0answers
5 views

Do any certificate revocation schemes revoke certificates issued before a certain date?

In the case of a large number of certificates needing to be revoked, the certificate revocation list may get quite long. This could be difficult to distribute over low bandwidth connections or to ...