ie检查服务器证书吊销,如何检查我的SSL证书是否已被吊销

从您的证书获取ocsp网址：

$ openssl x509 -noout -ocsp_uri -in /etc/letsencrypt/archive/31337.it/cert1.pem

http://ocsp.int-x1.letsencrypt.org/

$

向ocsp服务器发送请求，以检查证书是否被撤销：

$ openssl ocsp -issuer /etc/letsencrypt/archive/31337.it/chain4.pem -cert /etc/letsencrypt/archive/31337.it/cert4.pem -text -url http://ocsp.int-x1.letsencrypt.org/ -header "HOST" "ocsp.int-x1.letsencrypt.org"

...

This Update: Oct 29 10:00:00 2015 GMT

Next Update: Nov 5 10:00:00 2015 GMT

$

这是一个很好的证明。

这是已撤销的证书：

$ openssl ocsp -issuer /etc/letsencrypt/archive/31337.it/chain3.pem -cert /etc/letsencrypt/archive/31337.it/cert3.pem -text -url http://ocsp.int-x1.letsencrypt.org/ -header "HOST" "ocsp.int-x1.letsencrypt.org"

...

This Update: Oct 29 12:00:00 2015 GMT

Next Update: Nov 5 12:00:00 2015 GMT

Revocation Time: Oct 29 12:33:57 2015 GMT

$