3 ms·
If your certificate has been revoked and you don't know that (e.g. from a very alarming e-mail), something has seriously gone wrong. In the general case, it'd
by eqvinox 2y ago
If your certificate has been revoked and you don't know that (e.g. from a very alarming e-mail), something has seriously gone wrong. In the general case, it'd be yourself requesting the revocation to begin with. But even if it isn't, I'm pretty sure the CA is supposed to tell you expeditiously.
- phasmantistes 2y agoNot all subscribers provide email addresses through which they could be informed of a revocation.
- mcpherrinm 2y agoIdeally your server handles this automatically, which is why Let’s Encrypt is working on extending ACME to help with this case. Some good implementations of ocsp stapling can already automatically get a new certificate if they receive a “revoked” ocsp response. Requiring humans to read their email and be looped in is work I want to avoid needing at all.