0

For firewall purposes, trying to identify the cert revocation URL's for the major root CA's. Are these documented somewhere?

user2368632
  • 990
  • 1
  • 12
  • 33
  • 1
    you can try to lookup at CA vendor web sites, some of them publish URLs to their certificates and CRLs, but not all do that and there is no single authoritative resource with such URLs. – Crypt32 Apr 27 '20 at 14:27

1 Answers1

1

In addition to Crypt32's answer you should be able to get a CRL from a certificate itself. For instance if you look at the certificate for https://www.google.com (using a browser) you can see a CRL distribution point of http://crl.pki.goog/GTS1O1.crl The two certificates above it in the chain also have CRLs.

Julian
  • 317
  • 3
  • 9