OCSP Check ​

The OCSP Check can be used to query the status of a certificate based on the Online Certificate Status Protocol. The OCSP Check returns the information, whether a certificate is still valid or has already expired/deleted. If the latter is the case, a date is also returned when this was the case.

To perform the OCSP check, a certificate in PEM format and the corresponding intermediate are required. The intermediate contains the information which OCSP server is responsible for this certificate. Alternatively, only a PKCS7 certificate in PEM format can be used.

An OCSP check is performed fully automatically by many different types of software (e.g. browsers). A reasonable use case for a manual check would be e.g. to countercheck, whether a deletion ( revoke ) of a certificate has been successfully performed. It should be borne in mind that, depending on the Certificate Authority, several hours can pass between the revoke and the adjustment of the OCSP status.