OCSP

E792087

OCSP (Online Certificate Status Protocol) is an internet protocol used to obtain the real-time revocation status of digital certificates in public key infrastructures.

All labels observed (5)

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf PKI protocol ⓘ
internet protocol ⓘ
abbreviationFor Online Certificate Status Protocol ⓘ
linked to: OCSP
addressesProblem bandwidth overhead of CRLs ⓘ
latency of CRL distribution ⓘ
alternativeTo certificate revocation lists ⓘ
canBe mandatory in some security policies ⓘ
category certificate status protocol ⓘ
checksStatusOf X.509 digital certificate ⓘ
clientTypicallyIs TLS client ⓘ
web browser ⓘ
definedFor X.509 PKI ⓘ
definedInRFC RFC 6960 ⓘ
fullName Online Certificate Status Protocol ⓘ
linked to: OCSP
hasVariant OCSP stapling ⓘ
TLS Certificate Status Request extension ⓘ
linked to: OCSP
improves timeliness of revocation information ⓘ
mayLeak client browsing behavior if queried directly ⓘ
obsoletes RFC 2560 ⓘ
operatesBetween OCSP client and OCSP responder ⓘ
purpose obtain real-time revocation status of digital certificates ⓘ
relatedStandard RFC 5019 ⓘ
reliesOn trust in OCSP responder certificate ⓘ
replaces CRL polling in some deployments ⓘ
requestFormat ASN.1 ⓘ
responderTypicallyIs certificate authority service ⓘ
responseFormat ASN.1 ⓘ
responseSignedBy OCSP responder ⓘ
certificate authority ⓘ
RFC 5019Defines lightweight OCSP profile ⓘ
roleInSecurity certificate revocation checking ⓘ
specifiedIn PKIX standards ⓘ
standardizedBy IETF ⓘ
supportsExtension CRL references ⓘ
archive cutoff ⓘ
nonce ⓘ
service locator ⓘ
supportsStatus good ⓘ
revoked ⓘ
unknown ⓘ
transportsOver HTTP ⓘ
HTTPS ⓘ
usedIn HTTPS ⓘ
TLS ⓘ
X.509 certificate validation ⓘ
public key infrastructure ⓘ
usesCryptography public key cryptography ⓘ
usesModel request-response ⓘ
usesSignatureAlgorithm digital signatures ⓘ

How these facts were elicited

Referenced by (10)

Full triples — surface form annotated when it differs from this entity's canonical label.

Online Responder → supportsProtocol → Online Certificate Status Protocol ⓘ
linked to: OCSP
RFC 8550 → title → Online Certificate Status Protocol (OCSP) Non-Delegated Signing ⓘ
linked to: OCSP
RFC 8550 → updates → Online Certificate Status Protocol (OCSP) ⓘ
linked to: OCSP
RFC 8550 → usesProtocol → Online Certificate Status Protocol ⓘ
linked to: OCSP
RFC 8550 → usesProtocol → OCSP ⓘ
OCSP → fullName → Online Certificate Status Protocol ⓘ
linked to: OCSP
OCSP → abbreviationFor → Online Certificate Status Protocol ⓘ
linked to: OCSP
OCSP → hasVariant → TLS Certificate Status Request extension ⓘ
linked to: OCSP