CINXE.COM

<!DOCTYPE html> <html class="client-nojs vector-feature-language-in-header-enabled vector-feature-language-in-main-page-header-disabled vector-feature-sticky-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 vector-feature-night-mode-enabled skin-theme-clientpref-day vector-toc-available" lang="en" dir="ltr"> <head> <meta charset="UTF-8"> <title>Online Certificate Status Protocol - Wikipedia</title> <script>(function(){var className="client-js vector-feature-language-in-header-enabled vector-feature-language-in-main-page-header-disabled vector-feature-sticky-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 vector-feature-night-mode-enabled skin-theme-clientpref-day vector-toc-available";var cookie=document.cookie.match(/(?:^|; )enwikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pref+'$2');});}document.documentElement.className=className;}());RLCONF={"wgBreakFrames":false,"wgSeparatorTransformTable":["",""],"wgDigitTransformTable":["",""],"wgDefaultDateFormat":"dmy", "wgMonthNames":["","January","February","March","April","May","June","July","August","September","October","November","December"],"wgRequestId":"2505e620-d722-4e9d-ab75-790803e88bcb","wgCanonicalNamespace":"","wgCanonicalSpecialPageName":false,"wgNamespaceNumber":0,"wgPageName":"Online_Certificate_Status_Protocol","wgTitle":"Online Certificate Status Protocol","wgCurRevisionId":1251975849,"wgRevisionId":1251975849,"wgArticleId":955956,"wgIsArticle":true,"wgIsRedirect":false,"wgAction":"view","wgUserName":null,"wgUserGroups":["*"],"wgCategories":["Articles with short description","Short description matches Wikidata","Public key infrastructure","Cryptographic protocols","Internet Standards","Internet protocols","Transport Layer Security","Certificate revocation"],"wgPageViewLanguage":"en","wgPageContentLanguage":"en","wgPageContentModel":"wikitext","wgRelevantPageName":"Online_Certificate_Status_Protocol","wgRelevantArticleId":955956,"wgIsProbablyEditable":true, "wgRelevantPageIsProbablyEditable":true,"wgRestrictionEdit":[],"wgRestrictionMove":[],"wgNoticeProject":"wikipedia","wgCiteReferencePreviewsActive":false,"wgFlaggedRevsParams":{"tags":{"status":{"levels":1}}},"wgMediaViewerOnClick":true,"wgMediaViewerEnabledByDefault":true,"wgPopupsFlags":0,"wgVisualEditor":{"pageLanguageCode":"en","pageLanguageDir":"ltr","pageVariantFallbacks":"en"},"wgMFDisplayWikibaseDescriptions":{"search":true,"watchlist":true,"tagline":false,"nearby":true},"wgWMESchemaEditAttemptStepOversample":false,"wgWMEPageLength":20000,"wgRelatedArticlesCompat":[],"wgCentralAuthMobileDomain":false,"wgEditSubmitButtonLabelPublish":true,"wgULSPosition":"interlanguage","wgULSisCompactLinksEnabled":false,"wgVector2022LanguageInHeader":true,"wgULSisLanguageSelectorEmpty":false,"wgWikibaseItemId":"Q603970","wgCheckUserClientHintsHeadersJsApi":["brands","architecture","bitness","fullVersionList","mobile","model","platform","platformVersion"],"GEHomepageSuggestedEditsEnableTopics": true,"wgGETopicsMatchModeEnabled":false,"wgGEStructuredTaskRejectionReasonTextInputEnabled":false,"wgGELevelingUpEnabledForUser":false};RLSTATE={"ext.globalCssJs.user.styles":"ready","site.styles":"ready","user.styles":"ready","ext.globalCssJs.user":"ready","user":"ready","user.options":"loading","ext.cite.styles":"ready","skins.vector.search.codex.styles":"ready","skins.vector.styles":"ready","skins.vector.icons":"ready","jquery.makeCollapsible.styles":"ready","ext.wikimediamessages.styles":"ready","ext.visualEditor.desktopArticleTarget.noscript":"ready","ext.uls.interlanguage":"ready","wikibase.client.init":"ready","ext.wikimediaBadges":"ready"};RLPAGEMODULES=["ext.cite.ux-enhancements","mediawiki.page.media","site","mediawiki.page.ready","jquery.makeCollapsible","mediawiki.toc","skins.vector.js","ext.centralNotice.geoIP","ext.centralNotice.startUp","ext.gadget.ReferenceTooltips","ext.gadget.switcher","ext.urlShortener.toolbar","ext.centralauth.centralautologin","mmv.bootstrap", "ext.popups","ext.visualEditor.desktopArticleTarget.init","ext.visualEditor.targetLoader","ext.echo.centralauth","ext.eventLogging","ext.wikimediaEvents","ext.navigationTiming","ext.uls.interface","ext.cx.eventlogging.campaigns","ext.cx.uls.quick.actions","wikibase.client.vector-2022","ext.checkUser.clientHints","ext.growthExperiments.SuggestedEditSession","wikibase.sidebar.tracking"];</script> <script>(RLQ=window.RLQ||[]).push(function(){mw.loader.impl(function(){return["user.options@12s5i",function($,jQuery,require,module){mw.user.tokens.set({"patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"}); }];});});</script> <link rel="stylesheet" href="/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cext.wikimediamessages.styles%7Cjquery.makeCollapsible.styles%7Cskins.vector.icons%2Cstyles%7Cskins.vector.search.codex.styles%7Cwikibase.client.init&only=styles&skin=vector-2022"> <script async="" src="/w/load.php?lang=en&modules=startup&only=scripts&raw=1&skin=vector-2022"></script> <meta name="ResourceLoaderDynamicStyles" content=""> <link rel="stylesheet" href="/w/load.php?lang=en&modules=site.styles&only=styles&skin=vector-2022"> <meta name="generator" content="MediaWiki 1.44.0-wmf.4"> <meta name="referrer" content="origin"> <meta name="referrer" content="origin-when-cross-origin"> <meta name="robots" content="max-image-preview:standard"> <meta name="format-detection" content="telephone=no"> <meta name="viewport" content="width=1120"> <meta property="og:title" content="Online Certificate Status Protocol - Wikipedia"> <meta property="og:type" content="website"> <link rel="preconnect" href="//upload.wikimedia.org"> <link rel="alternate" media="only screen and (max-width: 640px)" href="//en.m.wikipedia.org/wiki/Online_Certificate_Status_Protocol"> <link rel="alternate" type="application/x-wiki" title="Edit this page" href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit"> <link rel="apple-touch-icon" href="/static/apple-touch/wikipedia.png"> <link rel="icon" href="/static/favicon/wikipedia.ico"> <link rel="search" type="application/opensearchdescription+xml" href="/w/rest.php/v1/search" title="Wikipedia (en)"> <link rel="EditURI" type="application/rsd+xml" href="//en.wikipedia.org/w/api.php?action=rsd"> <link rel="canonical" href="https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol"> <link rel="license" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en"> <link rel="alternate" type="application/atom+xml" title="Wikipedia Atom feed" href="/w/index.php?title=Special:RecentChanges&feed=atom"> <link rel="dns-prefetch" href="//meta.wikimedia.org" /> <link rel="dns-prefetch" href="//login.wikimedia.org"> </head> <body class="skin--responsive skin-vector skin-vector-search-vue mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject mw-editable page-Online_Certificate_Status_Protocol rootpage-Online_Certificate_Status_Protocol skin-vector-2022 action-view"><a class="mw-jump-link" href="#bodyContent">Jump to content</a> <div class="vector-header-container"> <header class="vector-header mw-header"> <div class="vector-header-start"> <nav class="vector-main-menu-landmark" aria-label="Site"> <div id="vector-main-menu-dropdown" class="vector-dropdown vector-main-menu-dropdown vector-button-flush-left vector-button-flush-right" > <input type="checkbox" id="vector-main-menu-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-main-menu-dropdown" class="vector-dropdown-checkbox " aria-label="Main menu" > <label id="vector-main-menu-dropdown-label" for="vector-main-menu-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-menu mw-ui-icon-wikimedia-menu"></span> <span class="vector-dropdown-label-text">Main menu</span> </label> <div class="vector-dropdown-content"> <div id="vector-main-menu-unpinned-container" class="vector-unpinned-container"> <div id="vector-main-menu" class="vector-main-menu vector-pinnable-element"> <div class="vector-pinnable-header vector-main-menu-pinnable-header vector-pinnable-header-unpinned" data-feature-name="main-menu-pinned" data-pinnable-element-id="vector-main-menu" data-pinned-container-id="vector-main-menu-pinned-container" data-unpinned-container-id="vector-main-menu-unpinned-container" > <div class="vector-pinnable-header-label">Main menu</div> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-main-menu.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-main-menu.unpin">hide</button> </div> <div id="p-navigation" class="vector-menu mw-portlet mw-portlet-navigation" > <div class="vector-menu-heading"> Navigation </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="n-mainpage-description" class="mw-list-item"><a href="/wiki/Main_Page" title="Visit the main page [z]" accesskey="z"><span>Main page</span></a></li><li id="n-contents" class="mw-list-item"><a href="/wiki/Wikipedia:Contents" title="Guides to browsing Wikipedia"><span>Contents</span></a></li><li id="n-currentevents" class="mw-list-item"><a href="/wiki/Portal:Current_events" title="Articles related to current events"><span>Current events</span></a></li><li id="n-randompage" class="mw-list-item"><a href="/wiki/Special:Random" title="Visit a randomly selected article [x]" accesskey="x"><span>Random article</span></a></li><li id="n-aboutsite" class="mw-list-item"><a href="/wiki/Wikipedia:About" title="Learn about Wikipedia and how it works"><span>About Wikipedia</span></a></li><li id="n-contactpage" class="mw-list-item"><a href="//en.wikipedia.org/wiki/Wikipedia:Contact_us" title="How to contact Wikipedia"><span>Contact us</span></a></li> </ul> </div> </div> <div id="p-interaction" class="vector-menu mw-portlet mw-portlet-interaction" > <div class="vector-menu-heading"> Contribute </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="n-help" class="mw-list-item"><a href="/wiki/Help:Contents" title="Guidance on how to use and edit Wikipedia"><span>Help</span></a></li><li id="n-introduction" class="mw-list-item"><a href="/wiki/Help:Introduction" title="Learn how to edit Wikipedia"><span>Learn to edit</span></a></li><li id="n-portal" class="mw-list-item"><a href="/wiki/Wikipedia:Community_portal" title="The hub for editors"><span>Community portal</span></a></li><li id="n-recentchanges" class="mw-list-item"><a href="/wiki/Special:RecentChanges" title="A list of recent changes to Wikipedia [r]" accesskey="r"><span>Recent changes</span></a></li><li id="n-upload" class="mw-list-item"><a href="/wiki/Wikipedia:File_upload_wizard" title="Add images or other media for use on Wikipedia"><span>Upload file</span></a></li> </ul> </div> </div> </div> </div> </div> </div> </nav> <a href="/wiki/Main_Page" class="mw-logo"> <img class="mw-logo-icon" src="/static/images/icons/wikipedia.png" alt="" aria-hidden="true" height="50" width="50"> <span class="mw-logo-container skin-invert"> <img class="mw-logo-wordmark" alt="Wikipedia" src="/static/images/mobile/copyright/wikipedia-wordmark-en.svg" style="width: 7.5em; height: 1.125em;"> <img class="mw-logo-tagline" alt="The Free Encyclopedia" src="/static/images/mobile/copyright/wikipedia-tagline-en.svg" width="117" height="13" style="width: 7.3125em; height: 0.8125em;"> </span> </a> </div> <div class="vector-header-end"> <div id="p-search" role="search" class="vector-search-box-vue vector-search-box-collapses vector-search-box-show-thumbnail vector-search-box-auto-expand-width vector-search-box"> <a href="/wiki/Special:Search" class="cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only search-toggle" title="Search Wikipedia [f]" accesskey="f"><span class="vector-icon mw-ui-icon-search mw-ui-icon-wikimedia-search"></span> <span>Search</span> </a> <div class="vector-typeahead-search-container"> <div class="cdx-typeahead-search cdx-typeahead-search--show-thumbnail cdx-typeahead-search--auto-expand-width"> <form action="/w/index.php" id="searchform" class="cdx-search-input cdx-search-input--has-end-button"> <div id="simpleSearch" class="cdx-search-input__input-wrapper" data-search-loc="header-moved"> <div class="cdx-text-input cdx-text-input--has-start-icon"> <input class="cdx-text-input__input" type="search" name="search" placeholder="Search Wikipedia" aria-label="Search Wikipedia" autocapitalize="sentences" title="Search Wikipedia [f]" accesskey="f" id="searchInput" > <span class="cdx-text-input__icon cdx-text-input__start-icon"></span> </div> <input type="hidden" name="title" value="Special:Search"> </div> <button class="cdx-button cdx-search-input__end-button">Search</button> </form> </div> </div> </div> <nav class="vector-user-links vector-user-links-wide" aria-label="Personal tools"> <div class="vector-user-links-main"> <div id="p-vector-user-menu-preferences" class="vector-menu mw-portlet emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> <div id="p-vector-user-menu-userpage" class="vector-menu mw-portlet emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> <nav class="vector-appearance-landmark" aria-label="Appearance"> <div id="vector-appearance-dropdown" class="vector-dropdown " title="Change the appearance of the page's font size, width, and color" > <input type="checkbox" id="vector-appearance-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-appearance-dropdown" class="vector-dropdown-checkbox " aria-label="Appearance" > <label id="vector-appearance-dropdown-label" for="vector-appearance-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-appearance mw-ui-icon-wikimedia-appearance"></span> <span class="vector-dropdown-label-text">Appearance</span> </label> <div class="vector-dropdown-content"> <div id="vector-appearance-unpinned-container" class="vector-unpinned-container"> </div> </div> </div> </nav> <div id="p-vector-user-menu-notifications" class="vector-menu mw-portlet emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> <div id="p-vector-user-menu-overflow" class="vector-menu mw-portlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="pt-sitesupport-2" class="user-links-collapsible-item mw-list-item user-links-collapsible-item"><a data-mw="interface" href="https://donate.wikimedia.org/wiki/Special:FundraiserRedirector?utm_source=donate&utm_medium=sidebar&utm_campaign=C13_en.wikipedia.org&uselang=en" class=""><span>Donate</span></a> </li> <li id="pt-createaccount-2" class="user-links-collapsible-item mw-list-item user-links-collapsible-item"><a data-mw="interface" href="/w/index.php?title=Special:CreateAccount&returnto=Online+Certificate+Status+Protocol" title="You are encouraged to create an account and log in; however, it is not mandatory" class=""><span>Create account</span></a> </li> <li id="pt-login-2" class="user-links-collapsible-item mw-list-item user-links-collapsible-item"><a data-mw="interface" href="/w/index.php?title=Special:UserLogin&returnto=Online+Certificate+Status+Protocol" title="You're encouraged to log in; however, it's not mandatory. [o]" accesskey="o" class=""><span>Log in</span></a> </li> </ul> </div> </div> </div> <div id="vector-user-links-dropdown" class="vector-dropdown vector-user-menu vector-button-flush-right vector-user-menu-logged-out" title="Log in and more options" > <input type="checkbox" id="vector-user-links-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-user-links-dropdown" class="vector-dropdown-checkbox " aria-label="Personal tools" > <label id="vector-user-links-dropdown-label" for="vector-user-links-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-ellipsis mw-ui-icon-wikimedia-ellipsis"></span> <span class="vector-dropdown-label-text">Personal tools</span> </label> <div class="vector-dropdown-content"> <div id="p-personal" class="vector-menu mw-portlet mw-portlet-personal user-links-collapsible-item" title="User menu" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="pt-sitesupport" class="user-links-collapsible-item mw-list-item"><a href="https://donate.wikimedia.org/wiki/Special:FundraiserRedirector?utm_source=donate&utm_medium=sidebar&utm_campaign=C13_en.wikipedia.org&uselang=en"><span>Donate</span></a></li><li id="pt-createaccount" class="user-links-collapsible-item mw-list-item"><a href="/w/index.php?title=Special:CreateAccount&returnto=Online+Certificate+Status+Protocol" title="You are encouraged to create an account and log in; however, it is not mandatory"><span class="vector-icon mw-ui-icon-userAdd mw-ui-icon-wikimedia-userAdd"></span> <span>Create account</span></a></li><li id="pt-login" class="user-links-collapsible-item mw-list-item"><a href="/w/index.php?title=Special:UserLogin&returnto=Online+Certificate+Status+Protocol" title="You're encouraged to log in; however, it's not mandatory. [o]" accesskey="o"><span class="vector-icon mw-ui-icon-logIn mw-ui-icon-wikimedia-logIn"></span> <span>Log in</span></a></li> </ul> </div> </div> <div id="p-user-menu-anon-editor" class="vector-menu mw-portlet mw-portlet-user-menu-anon-editor" > <div class="vector-menu-heading"> Pages for logged out editors <a href="/wiki/Help:Introduction" aria-label="Learn more about editing"><span>learn more</span></a> </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="pt-anoncontribs" class="mw-list-item"><a href="/wiki/Special:MyContributions" title="A list of edits made from this IP address [y]" accesskey="y"><span>Contributions</span></a></li><li id="pt-anontalk" class="mw-list-item"><a href="/wiki/Special:MyTalk" title="Discussion about edits from this IP address [n]" accesskey="n"><span>Talk</span></a></li> </ul> </div> </div> </div> </div> </nav> </div> </header> </div> <div class="mw-page-container"> <div class="mw-page-container-inner"> <div class="vector-sitenotice-container"> <div id="siteNotice"></div> </div> <div class="vector-column-start"> <div class="vector-main-menu-container"> <div id="mw-navigation"> <nav id="mw-panel" class="vector-main-menu-landmark" aria-label="Site"> <div id="vector-main-menu-pinned-container" class="vector-pinned-container"> </div> </nav> </div> </div> <div class="vector-sticky-pinned-container"> <nav id="mw-panel-toc" aria-label="Contents" data-event-name="ui.sidebar-toc" class="mw-table-of-contents-container vector-toc-landmark"> <div id="vector-toc-pinned-container" class="vector-pinned-container"> <div id="vector-toc" class="vector-toc vector-pinnable-element"> <div class="vector-pinnable-header vector-toc-pinnable-header vector-pinnable-header-pinned" data-feature-name="toc-pinned" data-pinnable-element-id="vector-toc" > <h2 class="vector-pinnable-header-label">Contents</h2> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-toc.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-toc.unpin">hide</button> </div> <ul class="vector-toc-contents" id="mw-panel-toc-list"> <li id="toc-mw-content-text" class="vector-toc-list-item vector-toc-level-1"> <a href="#" class="vector-toc-link"> <div class="vector-toc-text">(Top)</div> </a> </li> <li id="toc-Comparison_to_CRLs" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Comparison_to_CRLs"> <div class="vector-toc-text"> <span class="vector-toc-numb">1</span> <span>Comparison to CRLs</span> </div> </a> <ul id="toc-Comparison_to_CRLs-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Basic_PKI_implementation" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Basic_PKI_implementation"> <div class="vector-toc-text"> <span class="vector-toc-numb">2</span> <span>Basic PKI implementation</span> </div> </a> <ul id="toc-Basic_PKI_implementation-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Protocol_details" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Protocol_details"> <div class="vector-toc-text"> <span class="vector-toc-numb">3</span> <span>Protocol details</span> </div> </a> <ul id="toc-Protocol_details-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Privacy_concerns" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Privacy_concerns"> <div class="vector-toc-text"> <span class="vector-toc-numb">4</span> <span>Privacy concerns</span> </div> </a> <ul id="toc-Privacy_concerns-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Criticisms" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Criticisms"> <div class="vector-toc-text"> <span class="vector-toc-numb">5</span> <span>Criticisms</span> </div> </a> <ul id="toc-Criticisms-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Browser_support" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Browser_support"> <div class="vector-toc-text"> <span class="vector-toc-numb">6</span> <span>Browser support</span> </div> </a> <ul id="toc-Browser_support-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Implementations" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Implementations"> <div class="vector-toc-text"> <span class="vector-toc-numb">7</span> <span>Implementations</span> </div> </a> <button aria-controls="toc-Implementations-sublist" class="cdx-button cdx-button--weight-quiet cdx-button--icon-only vector-toc-toggle"> <span class="vector-icon mw-ui-icon-wikimedia-expand"></span> <span>Toggle Implementations subsection</span> </button> <ul id="toc-Implementations-sublist" class="vector-toc-list"> <li id="toc-Server" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Server"> <div class="vector-toc-text"> <span class="vector-toc-numb">7.1</span> <span>Server</span> </div> </a> <ul id="toc-Server-sublist" class="vector-toc-list"> <li id="toc-Open_source" class="vector-toc-list-item vector-toc-level-3"> <a class="vector-toc-link" href="#Open_source"> <div class="vector-toc-text"> <span class="vector-toc-numb">7.1.1</span> <span>Open source</span> </div> </a> <ul id="toc-Open_source-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Proprietary" class="vector-toc-list-item vector-toc-level-3"> <a class="vector-toc-link" href="#Proprietary"> <div class="vector-toc-text"> <span class="vector-toc-numb">7.1.2</span> <span>Proprietary</span> </div> </a> <ul id="toc-Proprietary-sublist" class="vector-toc-list"> </ul> </li> </ul> </li> <li id="toc-Library" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Library"> <div class="vector-toc-text"> <span class="vector-toc-numb">7.2</span> <span>Library</span> </div> </a> <ul id="toc-Library-sublist" class="vector-toc-list"> <li id="toc-Open_source_2" class="vector-toc-list-item vector-toc-level-3"> <a class="vector-toc-link" href="#Open_source_2"> <div class="vector-toc-text"> <span class="vector-toc-numb">7.2.1</span> <span>Open source</span> </div> </a> <ul id="toc-Open_source_2-sublist" class="vector-toc-list"> </ul> </li> </ul> </li> <li id="toc-Client" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Client"> <div class="vector-toc-text"> <span class="vector-toc-numb">7.3</span> <span>Client</span> </div> </a> <ul id="toc-Client-sublist" class="vector-toc-list"> </ul> </li> </ul> </li> <li id="toc-See_also" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#See_also"> <div class="vector-toc-text"> <span class="vector-toc-numb">8</span> <span>See also</span> </div> </a> <ul id="toc-See_also-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-References" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#References"> <div class="vector-toc-text"> <span class="vector-toc-numb">9</span> <span>References</span> </div> </a> <ul id="toc-References-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-External_links" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#External_links"> <div class="vector-toc-text"> <span class="vector-toc-numb">10</span> <span>External links</span> </div> </a> <ul id="toc-External_links-sublist" class="vector-toc-list"> </ul> </li> </ul> </div> </div> </nav> </div> </div> <div class="mw-content-container"> <main id="content" class="mw-body"> <header class="mw-body-header vector-page-titlebar"> <nav aria-label="Contents" class="vector-toc-landmark"> <div id="vector-page-titlebar-toc" class="vector-dropdown vector-page-titlebar-toc vector-button-flush-left" > <input type="checkbox" id="vector-page-titlebar-toc-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-page-titlebar-toc" class="vector-dropdown-checkbox " aria-label="Toggle the table of contents" > <label id="vector-page-titlebar-toc-label" for="vector-page-titlebar-toc-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-listBullet mw-ui-icon-wikimedia-listBullet"></span> <span class="vector-dropdown-label-text">Toggle the table of contents</span> </label> <div class="vector-dropdown-content"> <div id="vector-page-titlebar-toc-unpinned-container" class="vector-unpinned-container"> </div> </div> </div> </nav> <h1 id="firstHeading" class="firstHeading mw-first-heading"><span class="mw-page-title-main">Online Certificate Status Protocol</span></h1> <div id="p-lang-btn" class="vector-dropdown mw-portlet mw-portlet-lang" > <input type="checkbox" id="p-lang-btn-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-p-lang-btn" class="vector-dropdown-checkbox mw-interlanguage-selector" aria-label="Go to an article in another language. Available in 15 languages" > <label id="p-lang-btn-label" for="p-lang-btn-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--action-progressive mw-portlet-lang-heading-15" aria-hidden="true" ><span class="vector-icon mw-ui-icon-language-progressive mw-ui-icon-wikimedia-language-progressive"></span> <span class="vector-dropdown-label-text">15 languages</span> </label> <div class="vector-dropdown-content"> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li class="interlanguage-link interwiki-ar mw-list-item"><a href="https://ar.wikipedia.org/wiki/%D8%A8%D8%B1%D9%88%D8%AA%D9%88%D9%83%D9%88%D9%84_%D8%A3%D9%88%D8%B6%D8%A7%D8%B9_%D8%A7%D9%84%D8%B4%D9%87%D8%A7%D8%AF%D8%A7%D8%AA_%D8%B9%D9%84%D9%89_%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA" title="بروتوكول أوضاع الشهادات على الإنترنت – Arabic" lang="ar" hreflang="ar" data-title="بروتوكول أوضاع الشهادات على الإنترنت" data-language-autonym="العربية" data-language-local-name="Arabic" class="interlanguage-link-target"><span>العربية</span></a></li><li class="interlanguage-link interwiki-cs mw-list-item"><a href="https://cs.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Czech" lang="cs" hreflang="cs" data-title="Online Certificate Status Protocol" data-language-autonym="Čeština" data-language-local-name="Czech" class="interlanguage-link-target"><span>Čeština</span></a></li><li class="interlanguage-link interwiki-de mw-list-item"><a href="https://de.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – German" lang="de" hreflang="de" data-title="Online Certificate Status Protocol" data-language-autonym="Deutsch" data-language-local-name="German" class="interlanguage-link-target"><span>Deutsch</span></a></li><li class="interlanguage-link interwiki-es mw-list-item"><a href="https://es.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Spanish" lang="es" hreflang="es" data-title="Online Certificate Status Protocol" data-language-autonym="Español" data-language-local-name="Spanish" class="interlanguage-link-target"><span>Español</span></a></li><li class="interlanguage-link interwiki-fa mw-list-item"><a href="https://fa.wikipedia.org/wiki/%D9%BE%D8%B1%D9%88%D8%AA%DA%A9%D9%84_%D8%A8%D8%B1%D8%AE%D8%B7_%D8%AA%D8%B9%DB%8C%DB%8C%D9%86_%D9%88%D8%B6%D8%B9%DB%8C%D8%AA_%DA%AF%D9%88%D8%A7%D9%87%DB%8C" title="پروتکل برخط تعیین وضعیت گواهی – Persian" lang="fa" hreflang="fa" data-title="پروتکل برخط تعیین وضعیت گواهی" data-language-autonym="فارسی" data-language-local-name="Persian" class="interlanguage-link-target"><span>فارسی</span></a></li><li class="interlanguage-link interwiki-fr mw-list-item"><a href="https://fr.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – French" lang="fr" hreflang="fr" data-title="Online Certificate Status Protocol" data-language-autonym="Français" data-language-local-name="French" class="interlanguage-link-target"><span>Français</span></a></li><li class="interlanguage-link interwiki-ko mw-list-item"><a href="https://ko.wikipedia.org/wiki/%EC%98%A8%EB%9D%BC%EC%9D%B8_%EC%9D%B8%EC%A6%9D%EC%84%9C_%EC%83%81%ED%83%9C_%ED%94%84%EB%A1%9C%ED%86%A0%EC%BD%9C" title="온라인 인증서 상태 프로토콜 – Korean" lang="ko" hreflang="ko" data-title="온라인 인증서 상태 프로토콜" data-language-autonym="한국어" data-language-local-name="Korean" class="interlanguage-link-target"><span>한국어</span></a></li><li class="interlanguage-link interwiki-it mw-list-item"><a href="https://it.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Italian" lang="it" hreflang="it" data-title="Online Certificate Status Protocol" data-language-autonym="Italiano" data-language-local-name="Italian" class="interlanguage-link-target"><span>Italiano</span></a></li><li class="interlanguage-link interwiki-ja mw-list-item"><a href="https://ja.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Japanese" lang="ja" hreflang="ja" data-title="Online Certificate Status Protocol" data-language-autonym="日本語" data-language-local-name="Japanese" class="interlanguage-link-target"><span>日本語</span></a></li><li class="interlanguage-link interwiki-pl mw-list-item"><a href="https://pl.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Polish" lang="pl" hreflang="pl" data-title="Online Certificate Status Protocol" data-language-autonym="Polski" data-language-local-name="Polish" class="interlanguage-link-target"><span>Polski</span></a></li><li class="interlanguage-link interwiki-pt mw-list-item"><a href="https://pt.wikipedia.org/wiki/Protocolo_de_status_de_certificado_online" title="Protocolo de status de certificado online – Portuguese" lang="pt" hreflang="pt" data-title="Protocolo de status de certificado online" data-language-autonym="Português" data-language-local-name="Portuguese" class="interlanguage-link-target"><span>Português</span></a></li><li class="interlanguage-link interwiki-ru mw-list-item"><a href="https://ru.wikipedia.org/wiki/OCSP" title="OCSP – Russian" lang="ru" hreflang="ru" data-title="OCSP" data-language-autonym="Русский" data-language-local-name="Russian" class="interlanguage-link-target"><span>Русский</span></a></li><li class="interlanguage-link interwiki-sv mw-list-item"><a href="https://sv.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Swedish" lang="sv" hreflang="sv" data-title="Online Certificate Status Protocol" data-language-autonym="Svenska" data-language-local-name="Swedish" class="interlanguage-link-target"><span>Svenska</span></a></li><li class="interlanguage-link interwiki-uk mw-list-item"><a href="https://uk.wikipedia.org/wiki/Online_Certificate_Status_Protocol" title="Online Certificate Status Protocol – Ukrainian" lang="uk" hreflang="uk" data-title="Online Certificate Status Protocol" data-language-autonym="Українська" data-language-local-name="Ukrainian" class="interlanguage-link-target"><span>Українська</span></a></li><li class="interlanguage-link interwiki-zh mw-list-item"><a href="https://zh.wikipedia.org/wiki/%E5%9C%A8%E7%BA%BF%E8%AF%81%E4%B9%A6%E7%8A%B6%E6%80%81%E5%8D%8F%E8%AE%AE" title="在线证书状态协议 – Chinese" lang="zh" hreflang="zh" data-title="在线证书状态协议" data-language-autonym="中文" data-language-local-name="Chinese" class="interlanguage-link-target"><span>中文</span></a></li> </ul> <div class="after-portlet after-portlet-lang"><span class="wb-langlinks-edit wb-langlinks-link"><a href="https://www.wikidata.org/wiki/Special:EntityPage/Q603970#sitelinks-wikipedia" title="Edit interlanguage links" class="wbc-editpage">Edit links</a></span></div> </div> </div> </div> </header> <div class="vector-page-toolbar"> <div class="vector-page-toolbar-container"> <div id="left-navigation"> <nav aria-label="Namespaces"> <div id="p-associated-pages" class="vector-menu vector-menu-tabs mw-portlet mw-portlet-associated-pages" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-nstab-main" class="selected vector-tab-noicon mw-list-item"><a href="/wiki/Online_Certificate_Status_Protocol" title="View the content page [c]" accesskey="c"><span>Article</span></a></li><li id="ca-talk" class="vector-tab-noicon mw-list-item"><a href="/wiki/Talk:Online_Certificate_Status_Protocol" rel="discussion" title="Discuss improvements to the content page [t]" accesskey="t"><span>Talk</span></a></li> </ul> </div> </div> <div id="vector-variants-dropdown" class="vector-dropdown emptyPortlet" > <input type="checkbox" id="vector-variants-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-variants-dropdown" class="vector-dropdown-checkbox " aria-label="Change language variant" > <label id="vector-variants-dropdown-label" for="vector-variants-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet" aria-hidden="true" ><span class="vector-dropdown-label-text">English</span> </label> <div class="vector-dropdown-content"> <div id="p-variants" class="vector-menu mw-portlet mw-portlet-variants emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> </div> </div> </nav> </div> <div id="right-navigation" class="vector-collapsible"> <nav aria-label="Views"> <div id="p-views" class="vector-menu vector-menu-tabs mw-portlet mw-portlet-views" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-view" class="selected vector-tab-noicon mw-list-item"><a href="/wiki/Online_Certificate_Status_Protocol"><span>Read</span></a></li><li id="ca-edit" class="vector-tab-noicon mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit" title="Edit this page [e]" accesskey="e"><span>Edit</span></a></li><li id="ca-history" class="vector-tab-noicon mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=history" title="Past revisions of this page [h]" accesskey="h"><span>View history</span></a></li> </ul> </div> </div> </nav> <nav class="vector-page-tools-landmark" aria-label="Page tools"> <div id="vector-page-tools-dropdown" class="vector-dropdown vector-page-tools-dropdown" > <input type="checkbox" id="vector-page-tools-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-page-tools-dropdown" class="vector-dropdown-checkbox " aria-label="Tools" > <label id="vector-page-tools-dropdown-label" for="vector-page-tools-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet" aria-hidden="true" ><span class="vector-dropdown-label-text">Tools</span> </label> <div class="vector-dropdown-content"> <div id="vector-page-tools-unpinned-container" class="vector-unpinned-container"> <div id="vector-page-tools" class="vector-page-tools vector-pinnable-element"> <div class="vector-pinnable-header vector-page-tools-pinnable-header vector-pinnable-header-unpinned" data-feature-name="page-tools-pinned" data-pinnable-element-id="vector-page-tools" data-pinned-container-id="vector-page-tools-pinned-container" data-unpinned-container-id="vector-page-tools-unpinned-container" > <div class="vector-pinnable-header-label">Tools</div> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-page-tools.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-page-tools.unpin">hide</button> </div> <div id="p-cactions" class="vector-menu mw-portlet mw-portlet-cactions emptyPortlet vector-has-collapsible-items" title="More options" > <div class="vector-menu-heading"> Actions </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-more-view" class="selected vector-more-collapsible-item mw-list-item"><a href="/wiki/Online_Certificate_Status_Protocol"><span>Read</span></a></li><li id="ca-more-edit" class="vector-more-collapsible-item mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit" title="Edit this page [e]" accesskey="e"><span>Edit</span></a></li><li id="ca-more-history" class="vector-more-collapsible-item mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=history"><span>View history</span></a></li> </ul> </div> </div> <div id="p-tb" class="vector-menu mw-portlet mw-portlet-tb" > <div class="vector-menu-heading"> General </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="t-whatlinkshere" class="mw-list-item"><a href="/wiki/Special:WhatLinksHere/Online_Certificate_Status_Protocol" title="List of all English Wikipedia pages containing links to this page [j]" accesskey="j"><span>What links here</span></a></li><li id="t-recentchangeslinked" class="mw-list-item"><a href="/wiki/Special:RecentChangesLinked/Online_Certificate_Status_Protocol" rel="nofollow" title="Recent changes in pages linked from this page [k]" accesskey="k"><span>Related changes</span></a></li><li id="t-upload" class="mw-list-item"><a href="/wiki/Wikipedia:File_Upload_Wizard" title="Upload files [u]" accesskey="u"><span>Upload file</span></a></li><li id="t-specialpages" class="mw-list-item"><a href="/wiki/Special:SpecialPages" title="A list of all special pages [q]" accesskey="q"><span>Special pages</span></a></li><li id="t-permalink" class="mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&oldid=1251975849" title="Permanent link to this revision of this page"><span>Permanent link</span></a></li><li id="t-info" class="mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=info" title="More information about this page"><span>Page information</span></a></li><li id="t-cite" class="mw-list-item"><a href="/w/index.php?title=Special:CiteThisPage&page=Online_Certificate_Status_Protocol&id=1251975849&wpFormIdentifier=titleform" title="Information on how to cite this page"><span>Cite this page</span></a></li><li id="t-urlshortener" class="mw-list-item"><a href="/w/index.php?title=Special:UrlShortener&url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FOnline_Certificate_Status_Protocol"><span>Get shortened URL</span></a></li><li id="t-urlshortener-qrcode" class="mw-list-item"><a href="/w/index.php?title=Special:QrCode&url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FOnline_Certificate_Status_Protocol"><span>Download QR code</span></a></li> </ul> </div> </div> <div id="p-coll-print_export" class="vector-menu mw-portlet mw-portlet-coll-print_export" > <div class="vector-menu-heading"> Print/export </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="coll-download-as-rl" class="mw-list-item"><a href="/w/index.php?title=Special:DownloadAsPdf&page=Online_Certificate_Status_Protocol&action=show-download-screen" title="Download this page as a PDF file"><span>Download as PDF</span></a></li><li id="t-print" class="mw-list-item"><a href="/w/index.php?title=Online_Certificate_Status_Protocol&printable=yes" title="Printable version of this page [p]" accesskey="p"><span>Printable version</span></a></li> </ul> </div> </div> <div id="p-wikibase-otherprojects" class="vector-menu mw-portlet mw-portlet-wikibase-otherprojects" > <div class="vector-menu-heading"> In other projects </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="t-wikibase" class="wb-otherproject-link wb-otherproject-wikibase-dataitem mw-list-item"><a href="https://www.wikidata.org/wiki/Special:EntityPage/Q603970" title="Structured data on this page hosted by Wikidata [g]" accesskey="g"><span>Wikidata item</span></a></li> </ul> </div> </div> </div> </div> </div> </div> </nav> </div> </div> </div> <div class="vector-column-end"> <div class="vector-sticky-pinned-container"> <nav class="vector-page-tools-landmark" aria-label="Page tools"> <div id="vector-page-tools-pinned-container" class="vector-pinned-container"> </div> </nav> <nav class="vector-appearance-landmark" aria-label="Appearance"> <div id="vector-appearance-pinned-container" class="vector-pinned-container"> <div id="vector-appearance" class="vector-appearance vector-pinnable-element"> <div class="vector-pinnable-header vector-appearance-pinnable-header vector-pinnable-header-pinned" data-feature-name="appearance-pinned" data-pinnable-element-id="vector-appearance" data-pinned-container-id="vector-appearance-pinned-container" data-unpinned-container-id="vector-appearance-unpinned-container" > <div class="vector-pinnable-header-label">Appearance</div> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-appearance.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-appearance.unpin">hide</button> </div> </div> </div> </nav> </div> </div> <div id="bodyContent" class="vector-body" aria-labelledby="firstHeading" data-mw-ve-target-container> <div class="vector-body-before-content"> <div class="mw-indicators"> </div> <div id="siteSub" class="noprint">From Wikipedia, the free encyclopedia</div> </div> <div id="contentSub"><div id="mw-content-subtitle"></div></div> <div id="mw-content-text" class="mw-body-content"><div class="mw-content-ltr mw-parser-output" lang="en" dir="ltr"><div class="shortdescription nomobile noexcerpt noprint searchaux" style="display:none">Communications protocol</div> <style data-mw-deduplicate="TemplateStyles:r1257001546">.mw-parser-output .infobox-subbox{padding:0;border:none;margin:-3px;width:auto;min-width:100%;font-size:100%;clear:none;float:none;background-color:transparent}.mw-parser-output .infobox-3cols-child{margin:auto}.mw-parser-output .infobox .navbar{font-size:100%}@media screen{html.skin-theme-clientpref-night .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .infobox-full-data:not(.notheme) div:not(.notheme){background:#1f1f23!important;color:#f8f9fa}}@media(min-width:640px){body.skin--responsive .mw-parser-output .infobox-table{display:table!important}body.skin--responsive .mw-parser-output .infobox-table>caption{display:table-caption!important}body.skin--responsive .mw-parser-output .infobox-table>tbody{display:table-row-group}body.skin--responsive .mw-parser-output .infobox-table tr{display:table-row!important}body.skin--responsive .mw-parser-output .infobox-table th,body.skin--responsive .mw-parser-output .infobox-table td{padding-left:inherit;padding-right:inherit}}</style><table class="infobox hproduct"><caption class="infobox-title fn">OCSP</caption><tbody><tr><td colspan="2" class="infobox-subheader">Online Certificate Status Protocol</td></tr><tr><th scope="row" class="infobox-label">Status</th><td class="infobox-data"><a href="/wiki/Internet_Standard#Proposed_Standard" title="Internet Standard">Proposed Standard</a></td></tr><tr><th scope="row" class="infobox-label">Year started</th><td class="infobox-data">4 February 2002<span style="display:none"> (<span class="bday dtstart published updated itvstart">2002-02-04</span>)</span><sup id="cite_ref-history_1-0" class="reference"><a href="#cite_note-history-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup></td></tr><tr><th scope="row" class="infobox-label">First published</th><td class="infobox-data">11 February 2013<span style="display:none"> (<span class="bday dtstart published updated itvstart">2013-02-11</span>)</span><sup id="cite_ref-history_1-1" class="reference"><a href="#cite_note-history-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup></td></tr><tr><th scope="row" class="infobox-label">Authors</th><td class="infobox-data"><style data-mw-deduplicate="TemplateStyles:r1126788409">.mw-parser-output .plainlist ol,.mw-parser-output .plainlist ul{line-height:inherit;list-style:none;margin:0;padding:0}.mw-parser-output .plainlist ol li,.mw-parser-output .plainlist ul li{margin-bottom:0}</style><div class="plainlist"> <ul><li>Stefan Santesson</li> <li>Michael Myers</li> <li>Rich Ankney</li> <li>Ambarish Malpani</li> <li>Slava Galperin</li> <li><a href="/wiki/Carlisle_Adams" title="Carlisle Adams">Carlisle Adams</a></li> <li>Mohit Sahni</li> <li>Himanshu Sharma</li></ul> </div></td></tr><tr><th scope="row" class="infobox-label">Base standards</th><td class="infobox-data"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1126788409"><div class="plainlist"> <ul><li><a href="/wiki/Uniform_Resource_Identifier" title="Uniform Resource Identifier">Uniform Resource Identifier</a> (URI)</li> <li><a href="/wiki/S/MIME" title="S/MIME">Secure/Multipurpose Internet Mail Extensions</a> (S/MIME)</li></ul> </div></td></tr><tr><th scope="row" class="infobox-label">Domain</th><td class="infobox-data"><a href="/wiki/Digital_certificate" class="mw-redirect" title="Digital certificate">Digital certificate</a></td></tr><tr><th scope="row" class="infobox-label">Website</th><td class="infobox-data"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1126788409"><div class="plainlist"> <ul><li><style data-mw-deduplicate="TemplateStyles:r1238218222">.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("//upload.wikimedia.org/wikipedia/commons/6/65/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("//upload.wikimedia.org/wikipedia/commons/d/d6/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("//upload.wikimedia.org/wikipedia/commons/a/aa/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("//upload.wikimedia.org/wikipedia/commons/4/4c/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}</style><a href="/wiki/RFC_(identifier)" class="mw-redirect" title="RFC (identifier)">RFC</a> <a rel="nofollow" class="external text" href="https://datatracker.ietf.org/doc/html/rfc6960">6960</a>: OCSP</li> <li><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><a href="/wiki/RFC_(identifier)" class="mw-redirect" title="RFC (identifier)">RFC</a> <a rel="nofollow" class="external text" href="https://datatracker.ietf.org/doc/html/rfc8954">8954</a>: OCSP Nonce Extension</li> <li><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><a href="/wiki/RFC_(identifier)" class="mw-redirect" title="RFC (identifier)">RFC</a> <a rel="nofollow" class="external text" href="https://datatracker.ietf.org/doc/html/rfc9654">9654</a>: OCSP Nonce Extension Enhancements</li></ul> </div></td></tr></tbody></table> <p>The <b>Online Certificate Status Protocol</b> (<b>OCSP</b>) is an <a href="/wiki/Internet" title="Internet">Internet</a> <a href="/wiki/Communication_protocol" title="Communication protocol">protocol</a> used for obtaining the <a href="/wiki/Revocation_status" class="mw-redirect" title="Revocation status">revocation status</a> of an <a href="/wiki/X.509" title="X.509">X.509</a> <a href="/wiki/Digital_certificate" class="mw-redirect" title="Digital certificate">digital certificate</a>.<sup id="cite_ref-Digital-Ocean-Tutorial-OCSP-Stapling_2-0" class="reference"><a href="#cite_note-Digital-Ocean-Tutorial-OCSP-Stapling-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup> It is described in RFC 6960 and is on the <a href="/wiki/Internet_standard" class="mw-redirect" title="Internet standard">Internet standards</a> track. It was created as an alternative to <a href="/wiki/Certificate_revocation_list" title="Certificate revocation list">certificate revocation lists</a> (CRL), specifically addressing certain problems associated with using CRLs in a <a href="/wiki/Public_key_infrastructure" title="Public key infrastructure">public key infrastructure</a> (PKI).<sup id="cite_ref-GlobalSign-OCSP-Stapling_3-0" class="reference"><a href="#cite_note-GlobalSign-OCSP-Stapling-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup> Messages communicated via OCSP are encoded in <a href="/wiki/ASN.1" title="ASN.1">ASN.1</a> and are usually communicated over <a href="/wiki/HTTP" title="HTTP">HTTP</a>. The "request/response" nature of these messages leads to OCSP <a href="/wiki/Server_(computing)" title="Server (computing)">servers</a> being termed <i>OCSP responders</i>. </p><p>Some <a href="/wiki/Web_browser" title="Web browser">web browsers</a> (e.g., <a href="/wiki/Firefox" title="Firefox">Firefox</a><sup id="cite_ref-4" class="reference"><a href="#cite_note-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup>) use OCSP to validate <a href="/wiki/HTTPS" title="HTTPS">HTTPS</a> certificates, while others have disabled it.<sup id="cite_ref-5" class="reference"><a href="#cite_note-5"><span class="cite-bracket">[</span>5<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-6" class="reference"><a href="#cite_note-6"><span class="cite-bracket">[</span>6<span class="cite-bracket">]</span></a></sup> Most OCSP revocation statuses on the Internet disappear soon after certificate expiration.<sup id="cite_ref-7" class="reference"><a href="#cite_note-7"><span class="cite-bracket">[</span>7<span class="cite-bracket">]</span></a></sup> </p><p><a href="/wiki/Certificate_authority" title="Certificate authority">Certificate authorities</a> (CAs) were previously required by the <a href="/wiki/CA/Browser_Forum" title="CA/Browser Forum">CA/Browser Forum</a> to provide OCSP service, but this requirement was removed in August 2023, instead making CRLs required again.<sup id="cite_ref-8" class="reference"><a href="#cite_note-8"><span class="cite-bracket">[</span>8<span class="cite-bracket">]</span></a></sup> Let's Encrypt has announced their intention to end OCSP service as soon as possible, citing privacy concerns and operational simplicity.<sup id="cite_ref-9" class="reference"><a href="#cite_note-9"><span class="cite-bracket">[</span>9<span class="cite-bracket">]</span></a></sup> </p> <meta property="mw:PageProp/toc" /> <div class="mw-heading mw-heading2"><h2 id="Comparison_to_CRLs">Comparison to CRLs</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=1" title="Edit section: Comparison to CRLs"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ul><li>Since an OCSP response contains less data than a typical <a href="/wiki/Certificate_revocation_list" title="Certificate revocation list">certificate revocation list</a> (CRL), it puts less burden on network and client resources.<sup id="cite_ref-Gibson-OCSP-Must-Staple_10-0" class="reference"><a href="#cite_note-Gibson-OCSP-Must-Staple-10"><span class="cite-bracket">[</span>10<span class="cite-bracket">]</span></a></sup></li> <li>Since an OCSP response has less data to <a href="/wiki/Parsing" title="Parsing">parse</a>, the client-side <a href="/wiki/Library_(computing)" title="Library (computing)">libraries</a> that handle it can be less complex than those that handle CRLs.<sup id="cite_ref-Mozilla-OCSP-Stapling-Firefox_11-0" class="reference"><a href="#cite_note-Mozilla-OCSP-Stapling-Firefox-11"><span class="cite-bracket">[</span>11<span class="cite-bracket">]</span></a></sup></li> <li>OCSP discloses to the responder that a particular network host used a particular certificate at a particular time. OCSP does not mandate encryption, so other parties may intercept this information.<sup id="cite_ref-Digital-Ocean-Tutorial-OCSP-Stapling_2-1" class="reference"><a href="#cite_note-Digital-Ocean-Tutorial-OCSP-Stapling-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup></li></ul> <div class="mw-heading mw-heading2"><h2 id="Basic_PKI_implementation">Basic PKI implementation</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=2" title="Edit section: Basic PKI implementation"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ol><li><a href="/wiki/Alice_and_Bob" title="Alice and Bob">Alice and Bob</a> have <a href="/wiki/Public_key_certificate" title="Public key certificate">public key certificates</a> issued by Carol, the certificate authority (CA).</li> <li>Alice wishes to perform a transaction with Bob and sends him her public key certificate.</li> <li>Bob, concerned that Alice's private key may have been compromised, creates an 'OCSP request' that contains Alice's certificate serial number and sends it to Carol.</li> <li>Carol's OCSP responder reads the certificate serial number from Bob's request. The OCSP responder uses the certificate serial number to look up the revocation status of Alice's certificate. The OCSP responder looks in a CA database that Carol maintains. In this scenario, Carol's CA database is the only trusted location where a compromise to Alice's certificate would be recorded.</li> <li>Carol's OCSP responder confirms that Alice's certificate is still OK, and returns a <a href="/wiki/Digital_signature" title="Digital signature">signed</a>, successful 'OCSP response' to Bob.</li> <li>Bob cryptographically verifies Carol's signed response. Bob has stored Carol's public key some time before this transaction. Bob uses Carol's public key to verify Carol's response.</li> <li>Bob completes the transaction with Alice.</li></ol> <div class="mw-heading mw-heading2"><h2 id="Protocol_details">Protocol details</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=3" title="Edit section: Protocol details"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <p>An OCSP responder (a server typically run by the certificate issuer) may return a signed response signifying that the certificate specified in the request is 'good', 'revoked', or 'unknown'. If it cannot process the request, it may return an error code. </p><p>The OCSP request format supports additional extensions. This enables extensive customization to a particular PKI scheme. </p><p>OCSP can be vulnerable to <a href="/wiki/Replay_attack" title="Replay attack">replay attacks</a>,<sup id="cite_ref-12" class="reference"><a href="#cite_note-12"><span class="cite-bracket">[</span>12<span class="cite-bracket">]</span></a></sup> where a signed, 'good' response is captured by a malicious intermediary and replayed to the client at a later date after the subject certificate may have been revoked. OCSP allows a <a href="/wiki/Cryptographic_nonce" title="Cryptographic nonce">nonce</a> to be included in the request that may be included in the corresponding response. Because of high load, most OCSP responders do not use the nonce extension to create a different response for each request, instead using presigned responses with a validity period of multiple days. Thus, the replay attack is a major threat to validation systems. </p><p>OCSP can support more than one level of CA. OCSP requests may be chained between peer responders to query the issuing CA appropriate for the subject certificate, with responders validating each other's responses against the root CA using their own OCSP requests. </p><p>An OCSP responder may be queried for revocation information by <a href="/wiki/Delegated_Path_Validation" title="Delegated Path Validation">delegated path validation</a> (DPV) servers. OCSP does not, by itself, perform any DPV of supplied certificates. </p><p>The key that signs a response need not be the same key that signed the certificate. The certificate's issuer may delegate another authority to be the OCSP responder. In this case, the responder's certificate (the one that is used to sign the response) must be issued by the issuer of the certificate in question, and must include a certain extension that marks it as an OCSP signing authority (more precisely, an extended key usage extension with the <a href="/wiki/Object_identifier" title="Object identifier">OID</a> {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) keyPurpose(3) ocspSigning(9)}) </p> <div class="mw-heading mw-heading2"><h2 id="Privacy_concerns">Privacy concerns</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=4" title="Edit section: Privacy concerns"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <p>OCSP checking creates a privacy concern for some users, since it requires the client to contact a third party (albeit a party trusted by the client software vendor) to confirm certificate validity. <a href="/wiki/OCSP_stapling" title="OCSP stapling">OCSP stapling</a> is a way to verify validity without disclosing browsing behavior to the CA.<sup id="cite_ref-Digital-Ocean-Tutorial-OCSP-Stapling_2-2" class="reference"><a href="#cite_note-Digital-Ocean-Tutorial-OCSP-Stapling-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup> </p> <div class="mw-heading mw-heading2"><h2 id="Criticisms">Criticisms</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=5" title="Edit section: Criticisms"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <p>OCSP-based revocation is not an effective technique to mitigate against the compromise of an HTTPS server's private key. An attacker who has compromised a server's private key typically needs to be in a <a href="/wiki/Man-in-the-middle" class="mw-redirect" title="Man-in-the-middle">man-in-the-middle</a> position on the network to abuse that private key and impersonate a server. An attacker in such a position is also typically in a position to interfere with the client's OCSP queries. Because most clients will silently ignore OCSP if the query times out, OCSP is not a reliable means of mitigating HTTPS server key compromise.<sup id="cite_ref-13" class="reference"><a href="#cite_note-13"><span class="cite-bracket">[</span>13<span class="cite-bracket">]</span></a></sup> </p><p>The MustStaple TLS extension in a certificate can require that the certificate be verified by a <a href="/wiki/OCSP_stapling" title="OCSP stapling">stapled OCSP</a> response, mitigating this problem.<sup id="cite_ref-Gibson-OCSP-Must-Staple_10-1" class="reference"><a href="#cite_note-Gibson-OCSP-Must-Staple-10"><span class="cite-bracket">[</span>10<span class="cite-bracket">]</span></a></sup> OCSP also remains a valid defense against situations where the attacker is not a "man-in-the-middle" (code-signing or certificates issued in error). </p><p>The OCSP protocol assumes the requester has network access to connect to an appropriate OCSP responder. Some requesters may not be able to connect because their local network prohibits direct Internet access (a common practice for internal nodes in a data center). Forcing internal servers to connect to the Internet in order to use OCSP contributes to the <a href="/wiki/De-perimeterisation" title="De-perimeterisation">de-perimeterisation</a> trend. The <a href="/wiki/OCSP_stapling" title="OCSP stapling">OCSP stapling</a> protocol is an alternative that allows servers to cache OCSP responses, which removes the need for the requestor to directly contact the OCSP responder. </p> <div class="mw-heading mw-heading2"><h2 id="Browser_support">Browser support</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=6" title="Edit section: Browser support"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <figure class="mw-default-size" typeof="mw:File/Thumb"><a href="/wiki/File:Firefox_89_AboutCertificate_authority_info_screenshot.png" class="mw-file-description"><img src="//upload.wikimedia.org/wikipedia/commons/thumb/0/0b/Firefox_89_AboutCertificate_authority_info_screenshot.png/220px-Firefox_89_AboutCertificate_authority_info_screenshot.png" decoding="async" width="220" height="57" class="mw-file-element" srcset="//upload.wikimedia.org/wikipedia/commons/thumb/0/0b/Firefox_89_AboutCertificate_authority_info_screenshot.png/330px-Firefox_89_AboutCertificate_authority_info_screenshot.png 1.5x, //upload.wikimedia.org/wikipedia/commons/thumb/0/0b/Firefox_89_AboutCertificate_authority_info_screenshot.png/440px-Firefox_89_AboutCertificate_authority_info_screenshot.png 2x" data-file-width="797" data-file-height="206" /></a><figcaption>OCSP information on Firefox 89</figcaption></figure> <p>There is wide support for OCSP amongst most major browsers: </p> <ul><li><a href="/wiki/Internet_Explorer" title="Internet Explorer">Internet Explorer</a> is built on the <a href="/wiki/Microsoft_CryptoAPI" title="Microsoft CryptoAPI">CryptoAPI</a> of <a href="/wiki/Microsoft_Windows" title="Microsoft Windows">Windows</a> and thus starting with <a href="/wiki/Internet_Explorer_7" title="Internet Explorer 7">version 7</a> on <a href="/wiki/Windows_Vista" title="Windows Vista">Windows Vista</a> (not <a href="/wiki/Windows_XP" title="Windows XP">XP</a><sup id="cite_ref-14" class="reference"><a href="#cite_note-14"><span class="cite-bracket">[</span>14<span class="cite-bracket">]</span></a></sup>) supports OCSP checking.<sup id="cite_ref-15" class="reference"><a href="#cite_note-15"><span class="cite-bracket">[</span>15<span class="cite-bracket">]</span></a></sup></li> <li>All versions of <a href="/wiki/Mozilla_Firefox" class="mw-redirect" title="Mozilla Firefox">Mozilla Firefox</a> support OCSP checking. <a href="/wiki/Mozilla_Firefox_3" class="mw-redirect" title="Mozilla Firefox 3">Firefox 3</a> enables OCSP checking by default.<sup id="cite_ref-16" class="reference"><a href="#cite_note-16"><span class="cite-bracket">[</span>16<span class="cite-bracket">]</span></a></sup></li> <li><a href="/wiki/Safari_(web_browser)" title="Safari (web browser)">Safari</a> on macOS supports OCSP checking. It is enabled by default as of Mac OS X 10.7 (Lion). Prior to that, it has to be manually activated in Keychain preferences.<sup id="cite_ref-Sophos_17-0" class="reference"><a href="#cite_note-Sophos-17"><span class="cite-bracket">[</span>17<span class="cite-bracket">]</span></a></sup></li> <li>Versions of <a href="/wiki/Opera_(web_browser)" title="Opera (web browser)">Opera</a> from 8.0<sup id="cite_ref-18" class="reference"><a href="#cite_note-18"><span class="cite-bracket">[</span>18<span class="cite-bracket">]</span></a></sup><sup id="cite_ref-19" class="reference"><a href="#cite_note-19"><span class="cite-bracket">[</span>19<span class="cite-bracket">]</span></a></sup> to the current version support OCSP checking.</li></ul> <p>However, <a href="/wiki/Google_Chrome" title="Google Chrome">Google Chrome</a> is an outlier. Google disabled OCSP checks by default in 2012, citing latency and privacy issues<sup id="cite_ref-20" class="reference"><a href="#cite_note-20"><span class="cite-bracket">[</span>20<span class="cite-bracket">]</span></a></sup> and instead uses their own update mechanism to send revoked certificates to the browser.<sup id="cite_ref-21" class="reference"><a href="#cite_note-21"><span class="cite-bracket">[</span>21<span class="cite-bracket">]</span></a></sup> </p> <div class="mw-heading mw-heading2"><h2 id="Implementations">Implementations</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=7" title="Edit section: Implementations"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <p>Several <a href="/wiki/Open-source_license" title="Open-source license">open source</a> and <a href="/wiki/Proprietary_software" title="Proprietary software">proprietary</a> OCSP implementations exist, including fully featured <a href="/wiki/Server_(computing)" title="Server (computing)">servers</a> and <a href="/wiki/Library_(software)" class="mw-redirect" title="Library (software)">libraries</a> for building custom applications. OCSP <a href="/wiki/Client_(computing)" title="Client (computing)">client</a> support is built into many <a href="/wiki/Operating_systems" class="mw-redirect" title="Operating systems">operating systems</a>, <a href="/wiki/Web_browsers" class="mw-redirect" title="Web browsers">web browsers</a>, and other <a href="/wiki/Computer_network" title="Computer network">network</a> <a href="/wiki/Software" title="Software">software</a> due to the popularity of <a href="/wiki/HTTPS" title="HTTPS">HTTPS</a> and the <a href="/wiki/World_Wide_Web" title="World Wide Web">World Wide Web</a>. </p> <div class="mw-heading mw-heading3"><h3 id="Server">Server</h3><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=8" title="Edit section: Server"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <div class="mw-heading mw-heading4"><h4 id="Open_source">Open source</h4><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=9" title="Edit section: Open source"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ul><li>Boulder,<sup id="cite_ref-22" class="reference"><a href="#cite_note-22"><span class="cite-bracket">[</span>22<span class="cite-bracket">]</span></a></sup> CA and OCSP responder developed and used by <a href="/wiki/Let%27s_Encrypt" title="Let's Encrypt">Let's Encrypt</a> (<a href="/wiki/Go_(programming_language)" title="Go (programming language)">Go</a>)</li> <li>DogTag,<sup id="cite_ref-23" class="reference"><a href="#cite_note-23"><span class="cite-bracket">[</span>23<span class="cite-bracket">]</span></a></sup> Open source certificate authority CA, CRL and OCSP responder.</li> <li><a href="/wiki/EJBCA" title="EJBCA">EJBCA</a>,<sup id="cite_ref-24" class="reference"><a href="#cite_note-24"><span class="cite-bracket">[</span>24<span class="cite-bracket">]</span></a></sup> CA and OCSP responder (<a href="/wiki/Java_(programming_language)" title="Java (programming language)">Java</a>)</li> <li>XiPKI,<sup id="cite_ref-25" class="reference"><a href="#cite_note-25"><span class="cite-bracket">[</span>25<span class="cite-bracket">]</span></a></sup> CA and OCSP responder. With support of RFC 6960 and SHA3 (<a href="/wiki/Java_(programming_language)" title="Java (programming language)">Java</a>)</li> <li>OpenCA OCSP Responder <sup id="cite_ref-26" class="reference"><a href="#cite_note-26"><span class="cite-bracket">[</span>26<span class="cite-bracket">]</span></a></sup> Standalone OCSP responder from the OpenCA Project (<a href="/wiki/C_(programming_language)" title="C (programming language)">C</a>)</li></ul> <div class="mw-heading mw-heading4"><h4 id="Proprietary">Proprietary</h4><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=10" title="Edit section: Proprietary"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ul><li>Certificate Services <sup id="cite_ref-27" class="reference"><a href="#cite_note-27"><span class="cite-bracket">[</span>27<span class="cite-bracket">]</span></a></sup> CA and OCSP responder included with Windows Server</li></ul> <div class="mw-heading mw-heading3"><h3 id="Library">Library</h3><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=11" title="Edit section: Library"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <div class="mw-heading mw-heading4"><h4 id="Open_source_2">Open source</h4><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=12" title="Edit section: Open source"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ul><li>cfssl<sup id="cite_ref-28" class="reference"><a href="#cite_note-28"><span class="cite-bracket">[</span>28<span class="cite-bracket">]</span></a></sup> (Go)</li> <li><a href="/wiki/OpenSSL" title="OpenSSL">OpenSSL</a><sup id="cite_ref-29" class="reference"><a href="#cite_note-29"><span class="cite-bracket">[</span>29<span class="cite-bracket">]</span></a></sup> (<a href="/wiki/C_(programming_language)" title="C (programming language)">C</a>)</li> <li><a href="/wiki/WolfSSL" title="WolfSSL">wolfSSL</a><sup id="cite_ref-30" class="reference"><a href="#cite_note-30"><span class="cite-bracket">[</span>30<span class="cite-bracket">]</span></a></sup> (<a href="/wiki/C_(programming_language)" title="C (programming language)">C</a>)</li></ul> <div class="mw-heading mw-heading3"><h3 id="Client">Client</h3><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=13" title="Edit section: Client"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <style data-mw-deduplicate="TemplateStyles:r1236090951">.mw-parser-output .hatnote{font-style:italic}.mw-parser-output div.hatnote{padding-left:1.6em;margin-bottom:0.5em}.mw-parser-output .hatnote i{font-style:normal}.mw-parser-output .hatnote+link+.hatnote{margin-top:-0.5em}@media print{body.ns-0 .mw-parser-output .hatnote{display:none!important}}</style><div role="note" class="hatnote navigation-not-searchable">Further information: <a href="/wiki/Transport_Layer_Security#Applications_and_adoption" title="Transport Layer Security">Transport Layer Security § Applications and adoption</a>, and <a href="/wiki/X.509#Major_protocols_and_standards_using_X.509_certificates" title="X.509">X.509 § Major protocols and standards using X.509 certificates</a></div> <div class="mw-heading mw-heading2"><h2 id="See_also">See also</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=14" title="Edit section: See also"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ul><li><a href="/wiki/Certificate_revocation_list" title="Certificate revocation list">Certificate revocation list</a></li> <li><a href="/wiki/Certificate_authority" title="Certificate authority">Certificate authority</a></li> <li><a href="/wiki/SCVP" title="SCVP">Server-based Certificate Validation Protocol</a></li> <li><a href="/wiki/OCSP_stapling" title="OCSP stapling">OCSP stapling</a></li> <li><a href="/wiki/Certificate_Transparency" title="Certificate Transparency">Certificate Transparency</a></li></ul> <div class="mw-heading mw-heading2"><h2 id="References">References</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=15" title="Edit section: References"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <style data-mw-deduplicate="TemplateStyles:r1239543626">.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}</style><div class="reflist"> <div class="mw-references-wrap mw-references-columns"><ol class="references"> <li id="cite_note-history-1"><span class="mw-cite-backlink">^ <a href="#cite_ref-history_1-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-history_1-1"><sup><i><b>b</b></i></sup></a></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFSantessonMyersAnkneyMalpani2013" class="citation web cs1">Santesson, Stefan; Myers, Michael; Ankney, Rich; Malpani, Ambarish; Galperin, Slava; Adams, Carlisle (June 2013). <a rel="nofollow" class="external text" href="https://datatracker.ietf.org/doc/rfc6960/history/">"History for draft-ietf-pkix-rfc2560bis-20"</a><span class="reference-accessdate">. Retrieved <span class="nowrap">December 23,</span> 2021</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=History+for+draft-ietf-pkix-rfc2560bis-20&rft.date=2013-06&rft.aulast=Santesson&rft.aufirst=Stefan&rft.au=Myers%2C+Michael&rft.au=Ankney%2C+Rich&rft.au=Malpani%2C+Ambarish&rft.au=Galperin%2C+Slava&rft.au=Adams%2C+Carlisle&rft_id=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Frfc6960%2Fhistory%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-Digital-Ocean-Tutorial-OCSP-Stapling-2"><span class="mw-cite-backlink">^ <a href="#cite_ref-Digital-Ocean-Tutorial-OCSP-Stapling_2-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-Digital-Ocean-Tutorial-OCSP-Stapling_2-1"><sup><i><b>b</b></i></sup></a> <a href="#cite_ref-Digital-Ocean-Tutorial-OCSP-Stapling_2-2"><sup><i><b>c</b></i></sup></a></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFA.,_Jesin2014" class="citation web cs1">A., Jesin (June 12, 2014). <a rel="nofollow" class="external text" href="https://www.digitalocean.com/community/tutorials/how-to-configure-ocsp-stapling-on-apache-and-nginx">"How To Configure OCSP Stapling on Apache and Nginx"</a>. <i>Community Tutorials</i>. Digital Ocean, Inc<span class="reference-accessdate">. Retrieved <span class="nowrap">March 2,</span> 2015</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=Community+Tutorials&rft.atitle=How+To+Configure+OCSP+Stapling+on+Apache+and+Nginx&rft.date=2014-06-12&rft.au=A.%2C+Jesin&rft_id=https%3A%2F%2Fwww.digitalocean.com%2Fcommunity%2Ftutorials%2Fhow-to-configure-ocsp-stapling-on-apache-and-nginx&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-GlobalSign-OCSP-Stapling-3"><span class="mw-cite-backlink"><b><a href="#cite_ref-GlobalSign-OCSP-Stapling_3-0">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://support.globalsign.com/customer/portal/articles/1618853-ocsp-stapling">"OCSP Stapling"</a>. <i>GlobalSign Support</i>. GMO GlobalSign Inc. August 1, 2014<span class="reference-accessdate">. Retrieved <span class="nowrap">March 2,</span> 2015</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=GlobalSign+Support&rft.atitle=OCSP+Stapling&rft.date=2014-08-01&rft_id=https%3A%2F%2Fsupport.globalsign.com%2Fcustomer%2Fportal%2Farticles%2F1618853-ocsp-stapling&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-4"><span class="mw-cite-backlink"><b><a href="#cite_ref-4">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://wiki.mozilla.org/CA/Revocation_Checking_in_Firefox#OCSP">"CA/Revocation Checking in Firefox"</a>. <i>wiki.mozilla.org</i><span class="reference-accessdate">. Retrieved <span class="nowrap">29 June</span> 2022</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=wiki.mozilla.org&rft.atitle=CA%2FRevocation+Checking+in+Firefox&rft_id=https%3A%2F%2Fwiki.mozilla.org%2FCA%2FRevocation_Checking_in_Firefox%23OCSP&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-5"><span class="mw-cite-backlink"><b><a href="#cite_ref-5">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://community.letsencrypt.org/t/are-revoked-certificates-detected-in-safari-and-chrome/42677">"Are revoked certificates detected in Safari and Chrome?"</a>. 20 September 2017<span class="reference-accessdate">. Retrieved <span class="nowrap">29 June</span> 2022</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Are+revoked+certificates+detected+in+Safari+and+Chrome%3F&rft.date=2017-09-20&rft_id=https%3A%2F%2Fcommunity.letsencrypt.org%2Ft%2Fare-revoked-certificates-detected-in-safari-and-chrome%2F42677&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-6"><span class="mw-cite-backlink"><b><a href="#cite_ref-6">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.chromium.org/Home/chromium-security/crlsets/">"CRLSets"</a><span class="reference-accessdate">. Retrieved <span class="nowrap">29 June</span> 2022</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=CRLSets&rft_id=https%3A%2F%2Fwww.chromium.org%2FHome%2Fchromium-security%2Fcrlsets%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-7"><span class="mw-cite-backlink"><b><a href="#cite_ref-7">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFKorzhitskiiCarlsson2021" class="citation conference cs1">Korzhitskii, Nikita; Carlsson, Niklas (2021). "Revocation Statuses on the Internet". In Hohlfeld, Oliver; Lutu, Andra; Levin, Dave (eds.). <i>Passive and Active Measurement</i>. PAM 2021. <a href="/wiki/Lecture_Notes_in_Computer_Science" title="Lecture Notes in Computer Science">LNCS</a>. Vol. 12671. pp. 175–191. <a href="/wiki/ArXiv_(identifier)" class="mw-redirect" title="ArXiv (identifier)">arXiv</a>:<span class="id-lock-free" title="Freely accessible"><a rel="nofollow" class="external text" href="https://arxiv.org/abs/2102.04288">2102.04288</a></span>. <a href="/wiki/Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.1007%2F978-3-030-72582-2_11">10.1007/978-3-030-72582-2_11</a>. <a href="/wiki/ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <a href="/wiki/Special:BookSources/978-3-030-72582-2" title="Special:BookSources/978-3-030-72582-2"><bdi>978-3-030-72582-2</bdi></a>. <a href="/wiki/ISSN_(identifier)" class="mw-redirect" title="ISSN (identifier)">ISSN</a> <a rel="nofollow" class="external text" href="https://search.worldcat.org/issn/0302-9743">0302-9743</a>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=conference&rft.atitle=Revocation+Statuses+on+the+Internet&rft.btitle=Passive+and+Active+Measurement&rft.series=LNCS&rft.pages=175-191&rft.date=2021&rft_id=info%3Aarxiv%2F2102.04288&rft.issn=0302-9743&rft_id=info%3Adoi%2F10.1007%2F978-3-030-72582-2_11&rft.isbn=978-3-030-72582-2&rft.aulast=Korzhitskii&rft.aufirst=Nikita&rft.au=Carlsson%2C+Niklas&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-8"><span class="mw-cite-backlink"><b><a href="#cite_ref-8">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFBarreira2023" class="citation web cs1">Barreira, Inigo (September 28, 2023). <a rel="nofollow" class="external text" href="https://lists.cabforum.org/pipermail/servercert-wg/2023-September/003998.html">"[Servercert-wg] IPR Review period for SC63: Make OCSP optional, require CRLs, and incentivize automation"</a>. <i>lists.cabforum.org</i><span class="reference-accessdate">. Retrieved <span class="nowrap">August 4,</span> 2024</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=lists.cabforum.org&rft.atitle=%5BServercert-wg%5D+IPR+Review+period+for+SC63%3A+Make+OCSP+optional%2C+require+CRLs%2C+and+incentivize+automation&rft.date=2023-09-28&rft.aulast=Barreira&rft.aufirst=Inigo&rft_id=https%3A%2F%2Flists.cabforum.org%2Fpipermail%2Fservercert-wg%2F2023-September%2F003998.html&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-9"><span class="mw-cite-backlink"><b><a href="#cite_ref-9">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFAas2024" class="citation web cs1">Aas, Josh (July 23, 2024). <a rel="nofollow" class="external text" href="https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls">"Intent to End OCSP Service"</a>. <i>Let's Encrypt</i><span class="reference-accessdate">. Retrieved <span class="nowrap">August 4,</span> 2024</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=Let%27s+Encrypt&rft.atitle=Intent+to+End+OCSP+Service&rft.date=2024-07-23&rft.aulast=Aas&rft.aufirst=Josh&rft_id=https%3A%2F%2Fletsencrypt.org%2F2024%2F07%2F23%2Freplacing-ocsp-with-crls&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-Gibson-OCSP-Must-Staple-10"><span class="mw-cite-backlink">^ <a href="#cite_ref-Gibson-OCSP-Must-Staple_10-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-Gibson-OCSP-Must-Staple_10-1"><sup><i><b>b</b></i></sup></a></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFGibson,_Steve" class="citation web cs1">Gibson, Steve. <a rel="nofollow" class="external text" href="https://www.grc.com/revocation/ocsp-must-staple.htm">"Security Certificate Revocation Awareness: The case for "OCSP Must-Staple"<span class="cs1-kern-right"></span>"</a>. Gibson Research Corporation<span class="reference-accessdate">. Retrieved <span class="nowrap">March 2,</span> 2015</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Security+Certificate+Revocation+Awareness%3A+The+case+for+%22OCSP+Must-Staple%22&rft.pub=Gibson+Research+Corporation&rft.au=Gibson%2C+Steve&rft_id=https%3A%2F%2Fwww.grc.com%2Frevocation%2Focsp-must-staple.htm&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-Mozilla-OCSP-Stapling-Firefox-11"><span class="mw-cite-backlink"><b><a href="#cite_ref-Mozilla-OCSP-Stapling-Firefox_11-0">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFKeeler,_David2013" class="citation web cs1">Keeler, David (July 29, 2013). <a rel="nofollow" class="external text" href="https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/">"OCSP Stapling in Firefox"</a>. <i>Mozilla Security Blog</i>. Mozilla Foundation<span class="reference-accessdate">. Retrieved <span class="nowrap">March 2,</span> 2015</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=Mozilla+Security+Blog&rft.atitle=OCSP+Stapling+in+Firefox&rft.date=2013-07-29&rft.au=Keeler%2C+David&rft_id=https%3A%2F%2Fblog.mozilla.org%2Fsecurity%2F2013%2F07%2F29%2Focsp-stapling-in-firefox%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-12"><span class="mw-cite-backlink"><b><a href="#cite_ref-12">^</a></b></span> <span class="reference-text">RFC 6960, section 5, Security Considerations</span> </li> <li id="cite_note-13"><span class="mw-cite-backlink"><b><a href="#cite_ref-13">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.imperialviolet.org/2014/04/19/revchecking.html">"No, Don't Enable Revocation Checking"</a>. 19 April 2014<span class="reference-accessdate">. Retrieved <span class="nowrap">24 April</span> 2014</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=No%2C+Don%27t+Enable+Revocation+Checking&rft.date=2014-04-19&rft_id=https%3A%2F%2Fwww.imperialviolet.org%2F2014%2F04%2F19%2Frevchecking.html&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-14"><span class="mw-cite-backlink"><b><a href="#cite_ref-14">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://social.technet.microsoft.com/wiki/contents/articles/4954.windows-xp-certificate-status-and-revocation-checking.aspx#Certificate_Revocation_Process/">"Windows XP Certificate Status and Revocation Checking"</a>. <a href="/wiki/Microsoft" title="Microsoft">Microsoft</a><span class="reference-accessdate">. Retrieved <span class="nowrap">9 May</span> 2016</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Windows+XP+Certificate+Status+and+Revocation+Checking&rft.pub=Microsoft&rft_id=http%3A%2F%2Fsocial.technet.microsoft.com%2Fwiki%2Fcontents%2Farticles%2F4954.windows-xp-certificate-status-and-revocation-checking.aspx%23Certificate_Revocation_Process%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-15"><span class="mw-cite-backlink"><b><a href="#cite_ref-15">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://technet.microsoft.com/en-us/library/ee619736(v=ws.10).aspx/">"What's New in Certificate Revocation in Windows Vista and Windows Server 2008"</a>. <a href="/wiki/Microsoft" title="Microsoft">Microsoft</a>. 3 July 2013<span class="reference-accessdate">. Retrieved <span class="nowrap">9 May</span> 2016</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=What%27s+New+in+Certificate+Revocation+in+Windows+Vista+and+Windows+Server+2008&rft.pub=Microsoft&rft.date=2013-07-03&rft_id=https%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fee619736%28v%3Dws.10%29.aspx%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-16"><span class="mw-cite-backlink"><b><a href="#cite_ref-16">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://bugzilla.mozilla.org/show_bug.cgi?id=110161">"Mozilla Bug 110161 – Enable OCSP by Default"</a>. <a href="/wiki/Mozilla" title="Mozilla">Mozilla</a>. 1 October 2007<span class="reference-accessdate">. Retrieved <span class="nowrap">18 July</span> 2010</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Mozilla+Bug+110161+%E2%80%93+Enable+OCSP+by+Default&rft.pub=Mozilla&rft.date=2007-10-01&rft_id=https%3A%2F%2Fbugzilla.mozilla.org%2Fshow_bug.cgi%3Fid%3D110161&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-Sophos-17"><span class="mw-cite-backlink"><b><a href="#cite_ref-Sophos_17-0">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFWisniewski2011" class="citation web cs1">Wisniewski, Chester (26 March 2011). <a rel="nofollow" class="external text" href="https://nakedsecurity.sophos.com/2011/03/26/apple-users-left-to-defend-themselves-against-certificate-attacks/">"Apple users left to defend themselves against certificate attacks"</a>. <a href="/wiki/Sophos" title="Sophos">Sophos</a><span class="reference-accessdate">. Retrieved <span class="nowrap">26 March</span> 2011</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Apple+users+left+to+defend+themselves+against+certificate+attacks&rft.pub=Sophos&rft.date=2011-03-26&rft.aulast=Wisniewski&rft.aufirst=Chester&rft_id=http%3A%2F%2Fnakedsecurity.sophos.com%2F2011%2F03%2F26%2Fapple-users-left-to-defend-themselves-against-certificate-attacks%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-18"><span class="mw-cite-backlink"><b><a href="#cite_ref-18">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFPettersen2006" class="citation web cs1">Pettersen, Yngve Nysæter (November 9, 2006). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20100210031759/http://labs.opera.com/news/2006/11/09/">"Introducing Extended Validation Certificates"</a>. <a href="/wiki/Opera_Software" class="mw-redirect" title="Opera Software">Opera Software</a>. Archived from <a rel="nofollow" class="external text" href="http://labs.opera.com/news/2006/11/09/">the original</a> on 10 February 2010<span class="reference-accessdate">. Retrieved <span class="nowrap">8 January</span> 2010</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Introducing+Extended+Validation+Certificates&rft.pub=Opera+Software&rft.date=2006-11-09&rft.aulast=Pettersen&rft.aufirst=Yngve+Nys%C3%A6ter&rft_id=http%3A%2F%2Flabs.opera.com%2Fnews%2F2006%2F11%2F09%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-19"><span class="mw-cite-backlink"><b><a href="#cite_ref-19">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFPettersen2008" class="citation web cs1">Pettersen, Yngve Nysæter (3 July 2008). <a rel="nofollow" class="external text" href="http://my.opera.com/rootstore/blog/2008/07/03/rootstore-newsletter">"Rootstore newsletter"</a>. <a href="/wiki/Opera_Software" class="mw-redirect" title="Opera Software">Opera Software</a><span class="reference-accessdate">. Retrieved <span class="nowrap">8 January</span> 2010</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Rootstore+newsletter&rft.pub=Opera+Software&rft.date=2008-07-03&rft.aulast=Pettersen&rft.aufirst=Yngve+Nys%C3%A6ter&rft_id=http%3A%2F%2Fmy.opera.com%2Frootstore%2Fblog%2F2008%2F07%2F03%2Frootstore-newsletter&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-20"><span class="mw-cite-backlink"><b><a href="#cite_ref-20">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite id="CITEREFLangley,_Adam2012" class="citation web cs1">Langley, Adam (5 Feb 2012). <a rel="nofollow" class="external text" href="https://www.imperialviolet.org/2012/02/05/crlsets.html">"Revocation checking and Chrome's CRL"</a>. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20120212014932/http://www.imperialviolet.org/">Archived</a> from the original on 2012-02-12<span class="reference-accessdate">. Retrieved <span class="nowrap">2015-01-30</span></span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Revocation+checking+and+Chrome%27s+CRL&rft.date=2012-02-05&rft.au=Langley%2C+Adam&rft_id=https%3A%2F%2Fwww.imperialviolet.org%2F2012%2F02%2F05%2Fcrlsets.html&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-21"><span class="mw-cite-backlink"><b><a href="#cite_ref-21">^</a></b></span> <span class="reference-text"><a rel="nofollow" class="external text" href="https://www.zdnet.com/article/chrome-does-certificate-revocation-better/">"Chrome does certificate revocation better"</a>, April 21, 2014, Larry Seltzer, ZDNet</span> </li> <li id="cite_note-22"><span class="mw-cite-backlink"><b><a href="#cite_ref-22">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://github.com/letsencrypt/boulder">"Boulder – an ACME CA"</a>. <i><a href="/wiki/GitHub" title="GitHub">GitHub</a></i>. 16 March 2018<span class="reference-accessdate">. Retrieved <span class="nowrap">17 March</span> 2018</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=GitHub&rft.atitle=Boulder+%E2%80%93+an+ACME+CA&rft.date=2018-03-16&rft_id=https%3A%2F%2Fgithub.com%2Fletsencrypt%2Fboulder&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-23"><span class="mw-cite-backlink"><b><a href="#cite_ref-23">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.dogtagpki.org">"Dogtag Certificate System"</a><span class="reference-accessdate">. Retrieved <span class="nowrap">12 Aug</span> 2019</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=Dogtag+Certificate+System&rft_id=https%3A%2F%2Fwww.dogtagpki.org&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-24"><span class="mw-cite-backlink"><b><a href="#cite_ref-24">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.ejbca.org/">"EJBCA – Open Source PKI Certificate Authority"</a>. PrimeKey. 2 February 2018<span class="reference-accessdate">. Retrieved <span class="nowrap">17 March</span> 2018</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=EJBCA+%E2%80%93+Open+Source+PKI+Certificate+Authority&rft.pub=PrimeKey&rft.date=2018-02-02&rft_id=https%3A%2F%2Fwww.ejbca.org%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-25"><span class="mw-cite-backlink"><b><a href="#cite_ref-25">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://github.com/xipki/xipki">"XiPKI"</a>. <i>GitHub</i>. 13 March 2018<span class="reference-accessdate">. Retrieved <span class="nowrap">17 March</span> 2018</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=GitHub&rft.atitle=XiPKI&rft.date=2018-03-13&rft_id=https%3A%2F%2Fgithub.com%2Fxipki%2Fxipki&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-26"><span class="mw-cite-backlink"><b><a href="#cite_ref-26">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.openca.org/projects/ocspd/">"OpenCA OCSP"</a><span class="reference-accessdate">. Retrieved <span class="nowrap">3 January</span> 2024</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=OpenCA+OCSP&rft_id=https%3A%2F%2Fwww.openca.org%2Fprojects%2Focspd%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-27"><span class="mw-cite-backlink"><b><a href="#cite_ref-27">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://msdn.microsoft.com/en-us/library/windows/desktop/aa376539(v=vs.85).aspx">"Certificate Services (Windows)"</a>. <i>Windows Dev Center</i>. <a href="/wiki/Microsoft" title="Microsoft">Microsoft</a>. 2018<span class="reference-accessdate">. Retrieved <span class="nowrap">17 March</span> 2018</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=Windows+Dev+Center&rft.atitle=Certificate+Services+%28Windows%29&rft.date=2018&rft_id=https%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Flibrary%2Fwindows%2Fdesktop%2Faa376539%28v%3Dvs.85%29.aspx&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-28"><span class="mw-cite-backlink"><b><a href="#cite_ref-28">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://godoc.org/github.com/cloudflare/cfssl/ocsp">"Package ocsp"</a>. <i>cfssl GoDoc</i>. 25 February 2018<span class="reference-accessdate">. Retrieved <span class="nowrap">17 March</span> 2018</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=cfssl+GoDoc&rft.atitle=Package+ocsp&rft.date=2018-02-25&rft_id=https%3A%2F%2Fgodoc.org%2Fgithub.com%2Fcloudflare%2Fcfssl%2Focsp&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-29"><span class="mw-cite-backlink"><b><a href="#cite_ref-29">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.openssl.org/docs/manmaster/man3/OCSP_basic_sign.html">"OCSP_response_status"</a>. <i>master manpages</i>. <a href="/wiki/OpenSSL" title="OpenSSL">OpenSSL</a>. 2017<span class="reference-accessdate">. Retrieved <span class="nowrap">17 March</span> 2018</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=master+manpages&rft.atitle=OCSP_response_status&rft.date=2017&rft_id=https%3A%2F%2Fwww.openssl.org%2Fdocs%2Fmanmaster%2Fman3%2FOCSP_basic_sign.html&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> <li id="cite_note-30"><span class="mw-cite-backlink"><b><a href="#cite_ref-30">^</a></b></span> <span class="reference-text"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1238218222"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.wolfssl.com/ocsp-in-wolfssl-embedded-ssl-2/">"OCSP in wolfSSL Embedded SSL – wolfSSL"</a>. 2014-01-27<span class="reference-accessdate">. Retrieved <span class="nowrap">2019-01-25</span></span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=unknown&rft.btitle=OCSP+in+wolfSSL+Embedded+SSL+%E2%80%93+wolfSSL&rft.date=2014-01-27&rft_id=https%3A%2F%2Fwww.wolfssl.com%2Focsp-in-wolfssl-embedded-ssl-2%2F&rfr_id=info%3Asid%2Fen.wikipedia.org%3AOnline+Certificate+Status+Protocol" class="Z3988"></span></span> </li> </ol></div></div> <div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2><span class="mw-editsection"><span class="mw-editsection-bracket">[</span><a href="/w/index.php?title=Online_Certificate_Status_Protocol&action=edit&section=16" title="Edit section: External links"><span>edit</span></a><span class="mw-editsection-bracket">]</span></span></div> <ul><li><a rel="nofollow" class="external text" href="//tools.ietf.org/html/rfc2560">RFC 2560, X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP</a></li> <li><a rel="nofollow" class="external text" href="//tools.ietf.org/html/rfc4806">RFC 4806, Online Certificate Status Protocol (OCSP) Extensions to IKEv2</a></li> <li><a rel="nofollow" class="external text" href="//tools.ietf.org/html/rfc5019">RFC 5019, The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments</a></li> <li><a rel="nofollow" class="external text" href="//tools.ietf.org/html/rfc6960">RFC 6960, X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP</a></li> <li><a rel="nofollow" class="external text" href="https://web.archive.org/web/20131203092421/http://www.processor.com/editorial/article.asp?article=articles%2Fp3113%2F48p13%2F48p13.asp">Processor.com April, 2009 article about Online Certificate Status Protocol</a></li></ul> <div class="navbox-styles"><style data-mw-deduplicate="TemplateStyles:r1129693374">.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}</style><style data-mw-deduplicate="TemplateStyles:r1236075235">.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}</style></div><div role="navigation" class="navbox" aria-labelledby="Web_browsers" style="padding:3px"><table class="nowraplinks hlist mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1129693374"><style data-mw-deduplicate="TemplateStyles:r1239400231">.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}</style><div class="navbar plainlinks hlist navbar-mini"><ul><li class="nv-view"><a href="/wiki/Template:Web_browsers" title="Template:Web browsers"><abbr title="View this template">v</abbr></a></li><li class="nv-talk"><a href="/wiki/Template_talk:Web_browsers" title="Template talk:Web browsers"><abbr title="Discuss this template">t</abbr></a></li><li class="nv-edit"><a href="/wiki/Special:EditPage/Template:Web_browsers" title="Special:EditPage/Template:Web browsers"><abbr title="Edit this template">e</abbr></a></li></ul></div><div id="Web_browsers" style="font-size:114%;margin:0 4em"><a href="/wiki/Web_browser" title="Web browser">Web browsers</a></div></th></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks mw-collapsible uncollapsed navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="*_Features_*_standards_*_protocols" style="font-size:114%;margin:0 4em"> <ul><li>Features</li> <li>standards</li> <li>protocols</li></ul> </div></th></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Features</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Bookmark_(digital)" title="Bookmark (digital)">Bookmarks</a></li> <li><a href="/wiki/Browser_extension" title="Browser extension">Extensions</a></li> <li><a href="/wiki/Private_browsing" title="Private browsing">Privacy mode</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Web_standards" title="Web standards">Web standards</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/HTML" title="HTML">HTML</a> <ul><li><a href="/wiki/HTML5" title="HTML5">v5</a></li></ul></li> <li><a href="/wiki/CSS" title="CSS">CSS</a></li> <li><a href="/wiki/Document_Object_Model" title="Document Object Model">DOM</a></li> <li><a href="/wiki/JavaScript" title="JavaScript">JavaScript</a> <ul><li><a href="/wiki/WebAssembly" title="WebAssembly">WebAssembly</a></li> <li><a href="/wiki/Web_storage" title="Web storage">Web storage</a></li> <li><a href="/wiki/Indexed_Database_API" title="Indexed Database API">IndexedDB</a></li> <li><a href="/wiki/WebGL" title="WebGL">WebGL</a></li> <li><a href="/wiki/WebGPU" title="WebGPU">WebGPU</a></li></ul></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Protocols</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/HTTP" title="HTTP">HTTP</a> <ul><li><a href="/wiki/HTTPS" title="HTTPS">Encryption</a></li> <li><a href="/wiki/HTTP_cookie" title="HTTP cookie">Cookies</a> <ul><li><a href="/wiki/Third-party_cookies" title="Third-party cookies">third-party</a></li></ul></li></ul></li> <li><a class="mw-selflink selflink">OCSP</a></li> <li><a href="/wiki/WebRTC" title="WebRTC">WebRTC</a></li> <li><a href="/wiki/WebSocket" title="WebSocket">WebSocket</a></li></ul> </div></td></tr></tbody></table><div></div></td></tr></tbody></table><div></div></td></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks mw-collapsible mw-collapsed navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Active" style="font-size:114%;margin:0 4em">Active</div></th></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Blink_(browser_engine)" title="Blink (browser engine)">Blink</a>-based</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Proprietary_software" title="Proprietary software">Proprietary</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Google_Chrome" title="Google Chrome">Google Chrome</a></li> <li><a href="/wiki/Arc_(web_browser)" title="Arc (web browser)">Arc</a></li> <li><a href="/wiki/Avast_Secure_Browser" title="Avast Secure Browser">Avast</a></li> <li><a href="/wiki/C%E1%BB%91c_C%E1%BB%91c" title="Cốc Cốc">Coc Coc</a></li> <li><a href="/wiki/Comodo_Dragon" title="Comodo Dragon">Comodo</a></li> <li><a href="/wiki/Epic_(web_browser)" title="Epic (web browser)">Epic</a></li> <li><a href="/wiki/Maxthon" title="Maxthon">Maxthon</a></li> <li><a href="/wiki/Microsoft_Edge" title="Microsoft Edge">Microsoft Edge</a></li> <li><a href="/wiki/Opera_(web_browser)" title="Opera (web browser)">Opera</a> (<a href="/wiki/Opera_Mobile" title="Opera Mobile">Mobile</a>)</li> <li><a href="/wiki/Puffin_Browser" title="Puffin Browser">Puffin </a></li> <li><a href="/wiki/QQ_Browser" title="QQ Browser">QQ</a></li> <li><a href="/wiki/Samsung_Internet" title="Samsung Internet">Samsung</a></li> <li><a href="/wiki/Amazon_Silk" title="Amazon Silk">Silk</a></li> <li><a href="/wiki/Sleipnir_(web_browser)" title="Sleipnir (web browser)">Sleipnir</a></li> <li><a href="/wiki/SRWare_Iron" title="SRWare Iron">SRWare</a></li> <li><a href="/wiki/UC_Browser" title="UC Browser">UC</a></li> <li><a href="/wiki/Vivaldi_(web_browser)" title="Vivaldi (web browser)">Vivaldi</a></li> <li><a href="/wiki/Naver_Whale" title="Naver Whale">Whale</a></li> <li><a href="/wiki/Yandex_Browser" title="Yandex Browser">Yandex</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Free_and_Open_Source" class="mw-redirect" title="Free and Open Source">FOSS</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Chromium_(web_browser)" title="Chromium (web browser)">Chromium</a></li> <li><a href="/wiki/Brave_(web_browser)" title="Brave (web browser)">Brave</a></li> <li><a href="/wiki/Dooble" title="Dooble">Dooble</a></li> <li><a href="/wiki/Falkon" title="Falkon">Falkon</a></li> <li><a href="/wiki/Otter_Browser" title="Otter Browser">Otter</a></li> <li><a href="/wiki/Supermium" title="Supermium">Supermium</a></li> <li><a href="/wiki/Ungoogled-chromium" title="Ungoogled-chromium">ungoogled</a></li></ul> </div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Gecko_(software)" title="Gecko (software)">Gecko</a>-based</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Firefox" title="Firefox">Firefox</a></li> <li><a href="/wiki/Floorp" title="Floorp">Floorp</a></li> <li><a href="/wiki/GNU_IceCat" title="GNU IceCat">GNU IceCat</a></li> <li><a href="/wiki/LibreWolf" title="LibreWolf">LibreWolf</a></li> <li><a href="/wiki/Midori_(web_browser)" title="Midori (web browser)">Midori</a></li> <li><a href="/wiki/SlimBrowser" title="SlimBrowser">SlimBrowser</a></li> <li><a href="/wiki/Tor_Browser" class="mw-redirect" title="Tor Browser">Tor Browser</a></li> <li>Gecko <a href="/wiki/Fork_(software_development)" title="Fork (software development)">forks</a> <ul><li><a href="/wiki/Basilisk_(web_browser)" title="Basilisk (web browser)">Basilisk</a></li> <li><a href="/wiki/K-Meleon" title="K-Meleon">K-Meleon</a></li> <li><a href="/wiki/Pale_Moon" title="Pale Moon">Pale Moon</a></li> <li><a href="/wiki/SeaMonkey" title="SeaMonkey">SeaMonkey</a></li> <li><a href="/wiki/Waterfox" title="Waterfox">Waterfox</a></li></ul></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/WebKit" title="WebKit">WebKit</a>-based</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Safari_(web_browser)" title="Safari (web browser)">Safari</a></li> <li><a href="/wiki/GNOME_Web" title="GNOME Web">GNOME Web</a></li> <li><a href="/wiki/ICab" title="ICab">iCab</a></li> <li><a href="/wiki/Kagi_(search_engine)#Orion_Browser" title="Kagi (search engine)">Orion</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Multi-<a href="/wiki/Browser_engine" title="Browser engine">engine</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/360_Secure_Browser" title="360 Secure Browser">360</a></li> <li><a href="/wiki/DuckDuckGo_Private_Browser" title="DuckDuckGo Private Browser">DuckDuckGo</a></li> <li><a href="/wiki/Konqueror" title="Konqueror">Konqueror</a></li> <li><a href="/wiki/Lunascape" title="Lunascape">Lunascape</a></li> <li><a href="/wiki/NetFront" title="NetFront">NetFront</a></li> <li><a href="/wiki/Qutebrowser" title="Qutebrowser">qutebrowser</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Other</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Eww_(web_browser)" title="Eww (web browser)">eww</a></li> <li><a href="/wiki/Flow_(web_browser)" title="Flow (web browser)">Flow</a></li> <li><a href="/wiki/Ladybird_(web_browser)" title="Ladybird (web browser)">Ladybird</a></li> <li><a href="/wiki/Links_(web_browser)" title="Links (web browser)">Links</a></li> <li><a href="/wiki/Lynx_(web_browser)" title="Lynx (web browser)">Lynx</a></li> <li><a href="/wiki/NetSurf" title="NetSurf">NetSurf</a></li> <li><a href="/wiki/Opera_Mini" title="Opera Mini">Opera Mini</a></li> <li><a href="/wiki/W3m" title="W3m">w3m</a></li></ul> </div></td></tr></tbody></table><div></div></td></tr></tbody></table><div></div></td></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks mw-collapsible mw-collapsed navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Discontinued" style="font-size:114%;margin:0 4em">Discontinued</div></th></tr><tr><td colspan="2" class="navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Blink_(browser_engine)" title="Blink (browser engine)">Blink</a>-based</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Beaker_(web_browser)" title="Beaker (web browser)">Beaker</a></li> <li><a href="/wiki/Citrio" title="Citrio">Citrio</a></li> <li><a href="/wiki/Flock_(web_browser)" title="Flock (web browser)">Flock</a></li> <li><a href="/wiki/Redcore" title="Redcore">Redcore</a></li> <li><a href="/wiki/Rockmelt" title="Rockmelt">Rockmelt</a></li> <li><a href="/wiki/SalamWeb" title="SalamWeb">SalamWeb</a></li> <li><a href="/wiki/Sputnik_(search_engine)#Browser" title="Sputnik (search engine)">Sputnik</a></li> <li><a href="/wiki/Torch_(web_browser)" title="Torch (web browser)">Torch</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Gecko_(software)" title="Gecko (software)">Gecko</a>-based</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Beonex_Communicator" title="Beonex Communicator">Beonex</a></li> <li><a href="/wiki/Camino_(web_browser)" title="Camino (web browser)">Camino</a></li> <li><a href="/wiki/Classilla" title="Classilla">Classilla</a></li> <li><a href="/wiki/Conkeror" title="Conkeror">Conkeror</a></li> <li><a href="/wiki/Firefox_Lite" title="Firefox Lite">Firefox Lite</a></li> <li><a href="/wiki/Galeon" title="Galeon">Galeon</a></li> <li><a href="/wiki/Ghostzilla" title="Ghostzilla">Ghostzilla</a></li> <li><a href="/wiki/Comodo_IceDragon" title="Comodo IceDragon">IceDragon</a></li> <li><a href="/wiki/Kazehakase" title="Kazehakase">Kazehakase</a></li> <li><a href="/wiki/Kylo_(web_browser)" title="Kylo (web browser)">Kylo</a></li> <li><a href="/wiki/IBM_Lotus_Symphony" title="IBM Lotus Symphony">Lotus</a></li> <li><a href="/wiki/MicroB" title="MicroB">MicroB</a></li> <li><a href="/wiki/Minimo" title="Minimo">Minimo</a></li> <li><a href="/wiki/Mozilla_Application_Suite" title="Mozilla Application Suite">Mozilla suite</a></li> <li><a href="/wiki/PirateBrowser" title="PirateBrowser">PirateBrowser</a></li> <li><a href="/wiki/AT%26T_Pogo" title="AT&T Pogo">Pogo</a></li> <li><a href="/wiki/Kirix_Strata" title="Kirix Strata">Strata</a></li> <li><a href="/wiki/Swiftfox" title="Swiftfox">Swiftfox</a></li> <li><a href="/wiki/Swiftweasel" title="Swiftweasel">Swiftweasel</a></li> <li><a href="/wiki/TenFourFox" class="mw-redirect" title="TenFourFox">TenFourFox</a></li> <li><a href="/wiki/Timberwolf_(web_browser)" title="Timberwolf (web browser)">Timberwolf</a></li> <li><a href="/wiki/XB_Browser" title="XB Browser">xB</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Trident_(software)" title="Trident (software)">MSHTML</a>-based</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Internet_Explorer" title="Internet Explorer">Internet Explorer</a></li> <li><a href="/wiki/AOL_Explorer" title="AOL Explorer">AOL</a></li> <li><a href="/wiki/Deepnet_Explorer" title="Deepnet Explorer">Deepnet</a></li> <li><a href="/wiki/GreenBrowser" title="GreenBrowser">GreenBrowser</a></li> <li><a href="/wiki/MediaBrowser" title="MediaBrowser">MediaBrowser</a></li> <li><a href="/wiki/NeoPlanet" title="NeoPlanet">NeoPlanet</a></li> <li><a href="/wiki/NetCaptor" title="NetCaptor">NetCaptor</a></li> <li><a href="/wiki/SpaceTime_(software)#SpaceTime_Browser" title="SpaceTime (software)">SpaceTime</a></li> <li><a href="/wiki/ZAC_Browser" title="ZAC Browser">ZAC</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/WebKit" title="WebKit">WebKit</a>-based</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Arora_(web_browser)" title="Arora (web browser)">Arora</a></li> <li><a href="/wiki/Bolt_(web_browser)" title="Bolt (web browser)">BOLT</a></li> <li><a href="/wiki/Dolphin_Browser" title="Dolphin Browser">Dolphin</a></li> <li><a href="/wiki/Fluid_(web_browser)" title="Fluid (web browser)">Fluid</a></li> <li><a href="/wiki/Google_TV_(smart_TV_platform)" class="mw-redirect" title="Google TV (smart TV platform)">Google TV</a></li> <li><a href="/wiki/Iris_Browser" title="Iris Browser">Iris</a></li> <li><a href="/wiki/Mercury_Browser" title="Mercury Browser">Mercury</a></li> <li><a href="/wiki/Nokia_Browser_for_Symbian" title="Nokia Browser for Symbian">Nokia Symbian</a></li> <li><a href="/wiki/OmniWeb" title="OmniWeb">OmniWeb</a></li> <li><a href="/wiki/Opera_Coast" title="Opera Coast">Opera Coast</a></li> <li><a href="/wiki/Origyn_Web_Browser" title="Origyn Web Browser">Origyn</a></li> <li><a href="/wiki/QtWeb" title="QtWeb">QtWeb</a></li> <li><a href="/wiki/Shiira" title="Shiira">Shiira</a></li> <li><a href="/wiki/Steel_(web_browser)" title="Steel (web browser)">Steel</a></li> <li><a href="/wiki/Surf_(web_browser)" title="Surf (web browser)">surf</a></li> <li><a href="/wiki/Uzbl" title="Uzbl">Uzbl</a></li> <li><a href="/wiki/WebPositive" class="mw-redirect" title="WebPositive">WebPositive</a></li> <li><a href="/wiki/Xombrero" title="Xombrero">xombrero</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Other</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Abaco_(web_browser)" title="Abaco (web browser)">abaco</a></li> <li><a href="/wiki/Amaya_(web_editor)" title="Amaya (web editor)">Amaya</a></li> <li><a href="/wiki/Arachne_(web_browser)" title="Arachne (web browser)">Arachne</a></li> <li><a href="/wiki/Arena_(web_browser)" title="Arena (web browser)">Arena</a></li> <li><a href="/wiki/Blazer_(web_browser)" title="Blazer (web browser)">Blazer</a></li> <li><a href="/wiki/Cake_Browser" title="Cake Browser">Cake</a></li> <li><a href="/wiki/Charon_(web_browser)" title="Charon (web browser)">Charon</a></li> <li><a href="/wiki/CM_Browser" title="CM Browser">CM</a></li> <li><a href="/wiki/Microsoft_Live_Labs_Deepfish" title="Microsoft Live Labs Deepfish">Deepfish</a></li> <li><a href="/wiki/Dillo" title="Dillo">Dillo</a></li> <li><a href="/wiki/Microsoft_Edge_Legacy" class="mw-redirect" title="Microsoft Edge Legacy">Edge Legacy</a></li> <li><a href="/wiki/ELinks" title="ELinks">ELinks</a></li> <li><a href="/wiki/Gazelle_(web_browser)" title="Gazelle (web browser)">Gazelle</a></li> <li><a href="/wiki/HotJava" title="HotJava">HotJava</a></li> <li><a href="/wiki/IBM_Home_Page_Reader" title="IBM Home Page Reader">IBM Home Page Reader</a></li> <li><a href="/wiki/IBM_WebExplorer" title="IBM WebExplorer">IBM WebExplorer</a></li> <li><a href="/wiki/IBrowse" title="IBrowse">IBrowse</a></li> <li><a href="/wiki/Internet_Explorer_for_Mac" title="Internet Explorer for Mac">Internet Explorer for Mac</a></li> <li><a href="/wiki/KidZui" title="KidZui">KidZui</a></li> <li><a href="/wiki/Line_Mode_Browser" title="Line Mode Browser">Line Mode</a></li> <li><a href="/wiki/Mosaic_(web_browser)" class="mw-redirect" title="Mosaic (web browser)">Mosaic</a></li> <li><a href="/wiki/MSN_TV" title="MSN TV">MSN TV</a></li> <li><a href="/wiki/NetPositive" class="mw-redirect" title="NetPositive">NetPositive</a></li> <li><a href="/wiki/Netscape_(web_browser)" title="Netscape (web browser)">Netscape</a></li> <li><a href="/wiki/Skweezer" title="Skweezer">Skweezer</a></li> <li><a href="/wiki/Skyfire_(company)" title="Skyfire (company)">Skyfire</a></li> <li><a href="/wiki/ThunderHawk" title="ThunderHawk">ThunderHawk</a></li> <li><a href="/wiki/Vision_Mobile_Browser" title="Vision Mobile Browser">Vision</a></li> <li><a href="/wiki/WinWAP" title="WinWAP">WinWAP</a></li> <li><a href="/wiki/WorldWideWeb" title="WorldWideWeb">WorldWideWeb</a></li></ul> </div></td></tr></tbody></table><div></div></td></tr></tbody></table><div></div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div> <ul><li><a href="/wiki/Category:Web_browsers" title="Category:Web browsers">Category</a></li> <li><a href="/wiki/Comparison_of_web_browsers" title="Comparison of web browsers">Comparisons</a></li> <li><a href="/wiki/List_of_web_browsers" title="List of web browsers">List</a></li></ul> </div></td></tr></tbody></table></div> <div class="navbox-styles"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1129693374"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1236075235"></div><div role="navigation" class="navbox" aria-labelledby="TLS_and_SSL" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1129693374"><link rel="mw-deduplicated-inline-style" href="mw-data:TemplateStyles:r1239400231"><div class="navbar plainlinks hlist navbar-mini"><ul><li class="nv-view"><a href="/wiki/Template:TLS/SSL" title="Template:TLS/SSL"><abbr title="View this template">v</abbr></a></li><li class="nv-talk"><a href="/wiki/Template_talk:TLS/SSL" title="Template talk:TLS/SSL"><abbr title="Discuss this template">t</abbr></a></li><li class="nv-edit"><a href="/wiki/Special:EditPage/Template:TLS/SSL" title="Special:EditPage/Template:TLS/SSL"><abbr title="Edit this template">e</abbr></a></li></ul></div><div id="TLS_and_SSL" style="font-size:114%;margin:0 4em"><a href="/wiki/Transport_Layer_Security" title="Transport Layer Security">TLS and SSL</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Protocols and technologies</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Transport_Layer_Security" title="Transport Layer Security">Transport Layer Security / Secure Sockets Layer</a> (TLS/SSL)</li> <li><a href="/wiki/Datagram_Transport_Layer_Security" title="Datagram Transport Layer Security">Datagram Transport Layer Security</a> (DTLS)</li> <li><a href="/wiki/Server_Name_Indication" title="Server Name Indication">Server Name Indication</a> (SNI)</li> <li><a href="/wiki/Application-Layer_Protocol_Negotiation" title="Application-Layer Protocol Negotiation">Application-Layer Protocol Negotiation</a> (ALPN)</li> <li><a href="/wiki/DNS-based_Authentication_of_Named_Entities" title="DNS-based Authentication of Named Entities">DNS-based Authentication of Named Entities</a> (DANE)</li> <li><a href="/wiki/DNS_Certification_Authority_Authorization" title="DNS Certification Authority Authorization">DNS Certification Authority Authorization</a> (CAA)</li> <li><a href="/wiki/HTTPS" title="HTTPS">HTTPS</a></li> <li><a href="/wiki/HTTP_Strict_Transport_Security" title="HTTP Strict Transport Security">HTTP Strict Transport Security</a> (HSTS)</li> <li><a href="/wiki/HTTP_Public_Key_Pinning" title="HTTP Public Key Pinning">HTTP Public Key Pinning</a> (HPKP)</li> <li><a href="/wiki/OCSP_stapling" title="OCSP stapling">OCSP stapling</a></li> <li><a href="/wiki/Opportunistic_TLS" title="Opportunistic TLS">Opportunistic TLS</a></li> <li><a href="/wiki/Forward_secrecy" title="Forward secrecy">Perfect forward secrecy</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Public-key infrastructure</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Automated_Certificate_Management_Environment" class="mw-redirect" title="Automated Certificate Management Environment">Automated Certificate Management Environment</a> (ACME)</li> <li><a href="/wiki/Certificate_authority" title="Certificate authority">Certificate authority</a> (CA)</li> <li><a href="/wiki/CA/Browser_Forum" title="CA/Browser Forum">CA/Browser Forum</a></li> <li><a href="/wiki/Certificate_policy" title="Certificate policy">Certificate policy</a></li> <li><a href="/wiki/Certificate_revocation" title="Certificate revocation">Certificate revocation</a> <ul><li><a href="/wiki/Certificate_revocation_list" title="Certificate revocation list">Certificate revocation list</a> (CRL)</li> <li><a class="mw-selflink selflink">Online Certificate Status Protocol</a> (OCSP)</li> <li><a href="/wiki/OCSP_stapling" title="OCSP stapling">OCSP stapling</a></li></ul></li> <li><a href="/wiki/Domain-validated_certificate" title="Domain-validated certificate">Domain-validated certificate</a> (DV)</li> <li><a href="/wiki/Extended_Validation_Certificate" title="Extended Validation Certificate">Extended Validation Certificate</a> (EV)</li> <li><a href="/wiki/Public_key_certificate" title="Public key certificate">Public key certificate</a></li> <li><a href="/wiki/Public-key_cryptography" title="Public-key cryptography">Public-key cryptography</a></li> <li><a href="/wiki/Public_key_infrastructure" title="Public key infrastructure">Public key infrastructure</a> (PKI)</li> <li><a href="/wiki/Root_certificate" title="Root certificate">Root certificate</a></li> <li><a href="/wiki/Self-signed_certificate" title="Self-signed certificate">Self-signed certificate</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">See also</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Domain_Name_System_Security_Extensions" title="Domain Name System Security Extensions">Domain Name System Security Extensions</a> (DNSSEC)</li> <li><a href="/wiki/Internet_Protocol_Security" class="mw-redirect" title="Internet Protocol Security">Internet Protocol Security</a> (IPsec)</li> <li><a href="/wiki/Secure_Shell" title="Secure Shell">Secure Shell</a> (SSH)</li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">History</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Export_of_cryptography_from_the_United_States" title="Export of cryptography from the United States">Export of cryptography from the United States</a></li> <li><a href="/wiki/Server-Gated_Cryptography" title="Server-Gated Cryptography">Server-Gated Cryptography</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="/wiki/Comparison_of_TLS_implementations" title="Comparison of TLS implementations">Implementations</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Bouncy_Castle_(cryptography)" title="Bouncy Castle (cryptography)">Bouncy Castle</a></li> <li><a href="/wiki/BoringSSL" class="mw-redirect" title="BoringSSL">BoringSSL</a></li> <li><a href="/wiki/Botan_(programming_library)" title="Botan (programming library)">Botan</a></li> <li><a href="/wiki/BSAFE" title="BSAFE">BSAFE</a></li> <li><a href="/wiki/Cryptlib" title="Cryptlib">cryptlib</a></li> <li><a href="/wiki/GnuTLS" title="GnuTLS">GnuTLS</a></li> <li><a href="/wiki/Java_Secure_Socket_Extension" title="Java Secure Socket Extension">JSSE</a></li> <li><a href="/wiki/LibreSSL" title="LibreSSL">LibreSSL</a></li> <li><a href="/wiki/MatrixSSL" title="MatrixSSL">MatrixSSL</a></li> <li><a href="/wiki/Mbed_TLS" title="Mbed TLS">mbed TLS</a></li> <li><a href="/wiki/Network_Security_Services" title="Network Security Services">NSS</a></li> <li><a href="/wiki/OpenSSL" title="OpenSSL">OpenSSL</a></li> <li><a href="/wiki/Rustls" title="Rustls">Rustls</a></li> <li><a href="/wiki/S2n-tls" title="S2n-tls">s2n-tls</a></li> <li><a href="/wiki/Security_Support_Provider_Interface" title="Security Support Provider Interface">SChannel</a></li> <li><a href="/wiki/SSLeay" title="SSLeay">SSLeay</a></li> <li><a href="/wiki/Stunnel" title="Stunnel">stunnel</a></li> <li><a href="/wiki/WolfSSL" title="WolfSSL">wolfSSL</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Notaries</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Certificate_Transparency" title="Certificate Transparency">Certificate Transparency</a></li> <li><a href="/wiki/Convergence_(SSL)" title="Convergence (SSL)">Convergence</a></li> <li><a href="/wiki/HTTPS_Everywhere" title="HTTPS Everywhere">HTTPS Everywhere</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Vulnerabilities</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Theory</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Man-in-the-middle_attack" title="Man-in-the-middle attack">Man-in-the-middle attack</a></li> <li><a href="/wiki/Padding_oracle_attack" title="Padding oracle attack">Padding oracle attack</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Cipher</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Bar_mitzvah_attack" title="Bar mitzvah attack">Bar mitzvah attack</a></li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Protocol</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/BEAST_(security_exploit)" class="mw-redirect" title="BEAST (security exploit)">BEAST</a></li> <li><a href="/wiki/BREACH" title="BREACH">BREACH</a></li> <li><a href="/wiki/CRIME" title="CRIME">CRIME</a></li> <li><a href="/wiki/DROWN_attack" title="DROWN attack">DROWN</a></li> <li><a href="/wiki/Logjam_(computer_security)" title="Logjam (computer security)">Logjam</a></li> <li><a href="/wiki/POODLE" title="POODLE">POODLE</a> (in regards to SSL 3.0)</li></ul> </div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Implementation</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em"> <ul><li><a href="/wiki/Certificate_authority_compromise" class="mw-redirect" title="Certificate authority compromise">Certificate authority compromise</a></li> <li><a href="/wiki/Random_number_generator_attack" title="Random number generator attack">Random number generator attacks</a></li> <li><a href="/wiki/FREAK" title="FREAK">FREAK</a></li> <li><a href="/wiki/Goto_fail" class="mw-redirect" title="Goto fail">goto fail</a></li> <li><a href="/wiki/Heartbleed" title="Heartbleed">Heartbleed</a></li> <li><a href="/wiki/Lucky_Thirteen_attack" title="Lucky Thirteen attack">Lucky Thirteen attack</a></li> <li><a href="/wiki/POODLE" title="POODLE">POODLE</a> (in regards to TLS 1.0)</li> <li><a href="/wiki/Kazakhstan_man-in-the-middle_attack" title="Kazakhstan man-in-the-middle attack">Kazakhstan MITM attack</a></li></ul> </div></td></tr></tbody></table><div></div></td></tr></tbody></table></div>    </div><noscript><img src="https://login.wikimedia.org/wiki/Special:CentralAutoLogin/start?type=1x1" alt="" width="1" height="1" style="border: none; position: absolute;"></noscript> <div class="printfooter" data-nosnippet="">Retrieved from "<a dir="ltr" href="https://en.wikipedia.org/w/index.php?title=Online_Certificate_Status_Protocol&oldid=1251975849">https://en.wikipedia.org/w/index.php?title=Online_Certificate_Status_Protocol&oldid=1251975849</a>"</div></div> <div id="catlinks" class="catlinks" data-mw="interface"><div id="mw-normal-catlinks" class="mw-normal-catlinks"><a href="/wiki/Help:Category" title="Help:Category">Categories</a>: <ul><li><a href="/wiki/Category:Public_key_infrastructure" title="Category:Public key infrastructure">Public key infrastructure</a></li><li><a href="/wiki/Category:Cryptographic_protocols" title="Category:Cryptographic protocols">Cryptographic protocols</a></li><li><a href="/wiki/Category:Internet_Standards" title="Category:Internet Standards">Internet Standards</a></li><li><a href="/wiki/Category:Internet_protocols" title="Category:Internet protocols">Internet protocols</a></li><li><a href="/wiki/Category:Transport_Layer_Security" title="Category:Transport Layer Security">Transport Layer Security</a></li><li><a href="/wiki/Category:Certificate_revocation" title="Category:Certificate revocation">Certificate revocation</a></li></ul></div><div id="mw-hidden-catlinks" class="mw-hidden-catlinks mw-hidden-cats-hidden">Hidden categories: <ul><li><a href="/wiki/Category:Articles_with_short_description" title="Category:Articles with short description">Articles with short description</a></li><li><a href="/wiki/Category:Short_description_matches_Wikidata" title="Category:Short description matches Wikidata">Short description matches Wikidata</a></li></ul></div></div> </div> </main> </div> <div class="mw-footer-container"> <footer id="footer" class="mw-footer" > <ul id="footer-info"> <li id="footer-info-lastmod"> This page was last edited on 19 October 2024, at 03:51<span class="anonymous-show"> (UTC)</span>.</li> <li id="footer-info-copyright">Text is available under the <a href="/wiki/Wikipedia:Text_of_the_Creative_Commons_Attribution-ShareAlike_4.0_International_License" title="Wikipedia:Text of the Creative Commons Attribution-ShareAlike 4.0 International License">Creative Commons Attribution-ShareAlike 4.0 License</a>; additional terms may apply. By using this site, you agree to the <a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Terms_of_Use" class="extiw" title="foundation:Special:MyLanguage/Policy:Terms of Use">Terms of Use</a> and <a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Privacy_policy" class="extiw" title="foundation:Special:MyLanguage/Policy:Privacy policy">Privacy Policy</a>. Wikipedia® is a registered trademark of the <a rel="nofollow" class="external text" href="https://wikimediafoundation.org/">Wikimedia Foundation, Inc.</a>, a non-profit organization.</li> </ul> <ul id="footer-places"> <li id="footer-places-privacy"><a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Privacy_policy">Privacy policy</a></li> <li id="footer-places-about"><a href="/wiki/Wikipedia:About">About Wikipedia</a></li> <li id="footer-places-disclaimers"><a href="/wiki/Wikipedia:General_disclaimer">Disclaimers</a></li> <li id="footer-places-contact"><a href="//en.wikipedia.org/wiki/Wikipedia:Contact_us">Contact Wikipedia</a></li> <li id="footer-places-wm-codeofconduct"><a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Universal_Code_of_Conduct">Code of Conduct</a></li> <li id="footer-places-developers"><a href="https://developer.wikimedia.org">Developers</a></li> <li id="footer-places-statslink"><a href="https://stats.wikimedia.org/#/en.wikipedia.org">Statistics</a></li> <li id="footer-places-cookiestatement"><a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Cookie_statement">Cookie statement</a></li> <li id="footer-places-mobileview"><a href="//en.m.wikipedia.org/w/index.php?title=Online_Certificate_Status_Protocol&mobileaction=toggle_view_mobile" class="noprint stopMobileRedirectToggle">Mobile view</a></li> </ul> <ul id="footer-icons" class="noprint"> <li id="footer-copyrightico"><a href="https://wikimediafoundation.org/" class="cdx-button cdx-button--fake-button cdx-button--size-large cdx-button--fake-button--enabled"><img src="/static/images/footer/wikimedia-button.svg" width="84" height="29" alt="Wikimedia Foundation" loading="lazy"></a></li> <li id="footer-poweredbyico"><a href="https://www.mediawiki.org/" class="cdx-button cdx-button--fake-button cdx-button--size-large cdx-button--fake-button--enabled"><img src="/w/resources/assets/poweredby_mediawiki.svg" alt="Powered by MediaWiki" width="88" height="31" loading="lazy"></a></li> </ul> </footer> </div> </div> </div> <div class="vector-settings" id="p-dock-bottom"> <ul></ul> </div><script>(RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgHostname":"mw-web.codfw.main-f69cdc8f6-g7nzk","wgBackendResponseTime":162,"wgPageParseReport":{"limitreport":{"cputime":"0.522","walltime":"0.627","ppvisitednodes":{"value":2703,"limit":1000000},"postexpandincludesize":{"value":123961,"limit":2097152},"templateargumentsize":{"value":3331,"limit":2097152},"expansiondepth":{"value":21,"limit":100},"expensivefunctioncount":{"value":3,"limit":500},"unstrip-depth":{"value":1,"limit":20},"unstrip-size":{"value":122428,"limit":5000000},"entityaccesscount":{"value":0,"limit":400},"timingprofile":["100.00% 507.620 1 -total"," 39.19% 198.919 1 Template:Reflist"," 30.94% 157.052 27 Template:Cite_web"," 20.54% 104.249 1 Template:Web_browsers"," 20.13% 102.198 1 Template:Navbox_with_collapsible_groups"," 17.69% 89.797 1 Template:Infobox_technology_standard"," 17.20% 87.304 1 Template:Infobox"," 10.94% 55.511 1 Template:Short_description"," 8.78% 44.555 3 Template:Plainlist"," 7.10% 36.047 3 Template:IETF_RFC"]},"scribunto":{"limitreport-timeusage":{"value":"0.310","limit":"10.000"},"limitreport-memusage":{"value":5916932,"limit":52428800}},"cachereport":{"origin":"mw-web.codfw.main-f69cdc8f6-v45bm","timestamp":"20241122144415","ttl":2592000,"transientcontent":false}}});});</script> <script type="application/ld+json">{"@context":"https:\/\/schema.org","@type":"Article","name":"Online Certificate Status Protocol","url":"https:\/\/en.wikipedia.org\/wiki\/Online_Certificate_Status_Protocol","sameAs":"http:\/\/www.wikidata.org\/entity\/Q603970","mainEntity":"http:\/\/www.wikidata.org\/entity\/Q603970","author":{"@type":"Organization","name":"Contributors to Wikimedia projects"},"publisher":{"@type":"Organization","name":"Wikimedia Foundation, Inc.","logo":{"@type":"ImageObject","url":"https:\/\/www.wikimedia.org\/static\/images\/wmf-hor-googpub.png"}},"datePublished":"2004-09-03T22:06:09Z","dateModified":"2024-10-19T03:51:58Z","headline":"communications protocol"}</script> </body> </html>