OCSP

E792087

OCSP (Online Certificate Status Protocol) is an internet protocol used to obtain the real-time revocation status of digital certificates in public key infrastructures.

All labels observed (5)

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf PKI protocol
internet protocol
abbreviationFor Online Certificate Status Protocol
linked to: OCSP
addressesProblem bandwidth overhead of CRLs
latency of CRL distribution
alternativeTo certificate revocation lists
canBe mandatory in some security policies
category certificate status protocol
checksStatusOf X.509 digital certificate
clientTypicallyIs TLS client
web browser
definedFor X.509 PKI
definedInRFC RFC 6960
fullName Online Certificate Status Protocol
linked to: OCSP
hasVariant OCSP stapling
TLS Certificate Status Request extension
linked to: OCSP
improves timeliness of revocation information
mayLeak client browsing behavior if queried directly
obsoletes RFC 2560
operatesBetween OCSP client and OCSP responder
purpose obtain real-time revocation status of digital certificates
relatedStandard RFC 5019
reliesOn trust in OCSP responder certificate
replaces CRL polling in some deployments
requestFormat ASN.1
responderTypicallyIs certificate authority service
responseFormat ASN.1
responseSignedBy OCSP responder
certificate authority
RFC 5019Defines lightweight OCSP profile
roleInSecurity certificate revocation checking
specifiedIn PKIX standards
standardizedBy IETF
supportsExtension CRL references
archive cutoff
nonce
service locator
supportsStatus good
revoked
unknown
transportsOver HTTP
HTTPS
usedIn HTTPS
TLS
X.509 certificate validation
public key infrastructure
usesCryptography public key cryptography
usesModel request-response
usesSignatureAlgorithm digital signatures

How these facts were elicited

Referenced by (10)

Full triples — surface form annotated when it differs from this entity's canonical label.

Online Responder supportsProtocol Online Certificate Status Protocol
linked to: OCSP
RFC 8550 title Online Certificate Status Protocol (OCSP) Non-Delegated Signing
linked to: OCSP
RFC 8550 updates Online Certificate Status Protocol (OCSP)
linked to: OCSP
RFC 8550 usesProtocol Online Certificate Status Protocol
linked to: OCSP
RFC 8550 usesProtocol OCSP
OCSP fullName Online Certificate Status Protocol
linked to: OCSP
OCSP abbreviationFor Online Certificate Status Protocol
linked to: OCSP
OCSP hasVariant TLS Certificate Status Request extension
linked to: OCSP