There are couple of ways to verify if OCSP is returning the correct certificate status.
1. GUI.
* export certificate to a file, suggested format is base64 encoded file.
* run: certutil -URL C:\temp\test1.cer
2. CMD:
certutil -verify -urlfetch C:\temp\test02_04.cer
Check last lines of the output.
3. CMD. Create a folders: certificates and results and copy your certficifate to certificates folder and execute:
certutil -downloadocsp certificates results downloadonce
then view results with:
certutil .\results\44EAE067772C9DE9AD8CC2ADADB2DBF906305C9D.ocsp
No comments:
Post a Comment