Category Archives: Certificate Services

Verify CRL and OCSP of a certificate

One way to verify the revocation status of a certificate is to use the certutil command. Export a certificate from store in DER format. Save it to i.e C:\Temp\Cert.der Open a command promt and type. certutil -url C:\Temp\Cert.der The URL … Continue reading

Posted in Certificate Services | Tagged , , , | Comments Off on Verify CRL and OCSP of a certificate

CA Flags

Disable CRL check on startup certutil -setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE

Posted in Certificate Services | Tagged , , | Comments Off on CA Flags