In this article, there are cached certificate revocation list and online certificate revocation list terms used. I tried to find what these lists are but could find any human-readable info.

I want to understand where are these cached list stores on my computer (Windows, Linux) and what online list is used during online check (is there any URL from where I can download them)?

Thank you in advance.

  • $\begingroup$ Did you search for this yourself? It's easily googled. Try support.stackpath.com/hc/en-us/articles/… and techcommunity.microsoft.com/t5/core-infrastructure-and-security/… $\endgroup$ – Swashbuckler Aug 28 '20 at 18:58
  • $\begingroup$ The links you provided are all about the local cache, as i see. Also they mostly contain just some commands, without explanations i need. $\endgroup$ – Occam's chainsaw Aug 29 '20 at 9:10
  • $\begingroup$ That's what the article you linked is referring to - a local cache for the CRL of a site. Where else would a cache be located? $\endgroup$ – Swashbuckler Aug 30 '20 at 16:04
  • $\begingroup$ There is info for cached certificate revocation list, but what about online certificate revocation list? $\endgroup$ – Occam's chainsaw Aug 31 '20 at 3:05
  • $\begingroup$ Well, it's probable my bad English, i can describe my question properly. I see, that local crl cache stores something like links to crls, so when i use offline check it somehow (i also want to understand if crls are already downloaded and certutil -URLcache CRL only returns the urls or i'm wrong) uses these crls. Now, i want to understand what crl used while online check? $\endgroup$ – Occam's chainsaw Aug 31 '20 at 3:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.