2 ms·
> Also, the certificate contains lengthy URLs for CRL download locations and OCSP responders, 164 bytes in total. If you're going on that path It's probably be
by tumetab1 7y ago
> Also, the certificate contains lengthy URLs for CRL download locations and OCSP responders, 164 bytes in total.
If you're going on that path It's probably best to avoid revocation altogether, since it doesn't really work, and go the let's encrypt way, certificates with lower lifespans.
On that scale a 15 days cert on rotation is probably fine.
- mhenoch 7y agoThat's a good point. Seems like Let's Encrypt certificates contain an OCSP URL but no CRL URL, so they are a bit smaller.