I am an Open Banking enthusiast and I'm studying the Berlin Group's XS2A framework these days. There, it has an error code called CERTIFICATE_BLOCKED. As the description of it, it states,
"Signature/corporate seal certificate has been blocked by the ASPSP or the related NCA."
What I need to understand is what is the difference between certificate "blocking" and revoking? I understand the concept of why certificate authorities revoke certificates. We also can validate the certificate revocation statuses using OCSP and CRL endpoints online.
Following are what I need to understand,
- What is the difference between certificate "blocking" and "revoking"?
- Is blocking temporary? Can a blocked certificate be unblocked by a CA or an ASPSP (ASPSP is the word for a bank in Open Banking context)?
- Can anyone block a certificate (ASPSP/NCA)?
- Is there a way to check the certificate blocking status like OCSP and CRL endpoints?
PS: I've also looked up RFC5280, hoping there might be an explanation. I couldn't find anything about certificate blocking other than from the XS2A Berlin Open Banking specification.