Ressources

La révocation retardée délibérée met en péril la confiance et la sécurité. Sectigo appelle à une action immédiate pour protéger l'intégrité du Web PKI.

An enterprise SSL subscriber recently used a Temporary Restraining Order to prevent the proper revocation of misissued certificates. We explain.

We detail mandatory revocation periods for leaf certificates and intermediates and explain when a 24-hour versus a 120-hour revocation deadline applies.

We discuss misuse of wildcard certificates, failure to revoke on time, and how these two failures magnify each other.

An epidemic of delayed revocations has infected the public CA community. We track delayed revocations since the beginning of 2021 and discuss root causes.

Les certificats numériques renforcent la sécurité. La gestion du cycle de vie, y compris la révocation, permet d'éviter les vulnérabilités.

If you issue public certificates that are fully compliant except they don't reflect what your CPS says, are they misissued? Do they require revocation?

We explain the allowed public SSL revocation reason codes, along with some explicitly forbidden reason codes and the backstory behind them.

Concerns recently have been raised about OCSP real-time certificate checking and its potential to violate privacy.

Research of public revocation information examines revocation behavior from public CAs. Listen for the main takeaways and "revocation transparency."

Apple's Big Sur OS rollout drove a slowdown in the company's OCSP responders, affecting all Apple operating systems. We explain what happened and why.

14 public CAs have to revoke intermediates and destroy their keys, putting millions of active SSL, S/MIME, and other public certificates at risk.

One essential portion of the certificate lifecycle is the ability to revoke certificates. Public SSL certificates use a pair of mechanisms to communicate this revocation status to client machines, CRL and OCSP. In this episode we explain how these…

Certificate revocation is an essential part of the certificate lifecycle. Join our hosts as they discuss revocation by the CA, code signing, and malware.