About Certificate Revocation Checker

Checks certificate revocation status using CRL and OCSP protocols. Verifies whether a certificate has been revoked by its issuing Certificate Authority.

How to Use

1Enter domain or paste certificate
2Click Check Revocation
3Review status

Use Cases

•Verify certificate validity
•Incident response
•Compliance checking

Frequently Asked Questions

Certificate revocation is when a Certificate Authority invalidates a certificate before its expiry date, typically due to key compromise, mis-issuance, or changes in the certificate subject.

CRL (Certificate Revocation List) is a list of revoked certificates published by the CA. OCSP (Online Certificate Status Protocol) provides real-time revocation status checks. OCSP is generally faster and more current.

OCSP responses are typically updated within hours of a revocation event. CRLs are published on a schedule set by the CA, usually every 24 hours. Some CAs provide delta CRLs for more frequent updates.

Tips & Best Practices

•Check certificate revocation status before trusting certificates
•Use multiple revocation checking methods for reliability
•Monitor revocation status changes for security awareness
•Understand soft-fail vs hard-fail revocation checking implications

Technical Details

Methods: OCSP and CRL revocation status checking
OCSP: Online Certificate Status Protocol real-time check
CRL: Certificate Revocation List download and check
Output: Revocation status with method and timestamp

Certificate Revocation Status Checker

Revocation Status

OCSP Response

CRL Status