PKI OCSP Certificate CLI

Checking Certificate Status (Not Implemented)

The pki ocsp-cert-status can be used to generate and send OCSP request by downloading the issuer certificate automatically from the server. However, the proper OCSP request should be generated using the proper OCSP client with the issuer certificate already installed on the client.

To check certificate status using the OCSP responder in OCSP subsystem:

$ pki ocsp-cert-status <certificate ID>

To check certificate status using other OCSP responder:

$ pki ocsp-cert-status <certificate ID> --ocsp http://$HOSTNAME:8080/ocsp/ee/ocsp

See also OCSPClient.