SSL Toolkit Logo
Tools Features Compare FAQ Login

SSL CRL Checker

Check Certificate Revocation Lists - paste a certificate or enter a CRL URL

Fetching and parsing CRL...

About CRL Checker

Our free CRL Checker queries Certificate Revocation Lists to verify if a certificate has been revoked. Enter a certificate's PEM text or URL to check its revocation status against the issuing CA's CRL distribution point.

How to Use

  1. 1Paste the certificate PEM text or enter a CRL distribution URL.
  2. 2Click "Check CRL" to query the revocation list.
  3. 3View the revocation status and reason if revoked.

Use Cases

  • •Verify certificate revocation status
  • •Audit certificate lifecycle
  • •Compliance checking
  • •Incident response verification

Related Tools

OCSP Checker SSL Checker Certificate Decoder Security Scanner Chain Builder CT Log Search

Technical Details

CRL Sources

  • CA CRL distribution points
  • Revocation status and reason codes

Revocation Reasons

  • keyCompromise, CACompromise
  • affiliationChanged, superseded, cessationOfOperation

Tips & Best Practices

  • •CRLs can be delayed — for real-time checks, use OCSP instead
  • •Check CRL if you suspect a certificate was compromised
  • •Monitor CRL distribution points for availability issues

Frequently Asked Questions

Certificate Revocation List is a list of certificates that have been revoked by the CA before their expiration date.
The certificate has not been revoked and is still valid according to the CRL.
CAs typically update CRLs every few hours. Check the Next Update field for the refresh time.

Video Tutorial

Video tutorial coming soon