Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when encountering a revoked cert. The revocation can occur via either OCSP or CRL.

I've tried digging around CRLs, but they list the serial number of a certificate and don't provide a URL for me to try connecting.

Could someone provide a URL to a live site with a non-self-signed but revoked cert? Or perhaps there's a way to look up certs in a CRL and cross reference them to a URL?

share|improve this question

2 Answers 2

up vote 7 down vote accepted

Does this one fit the bill? https://test-sspev.verisign.com:2443/test-SSPEV-revoked-verisign.html

share|improve this answer
    
That will fit the bill! Thanks. Although there's a funny port number assigned to the URL, the user experience should be the same, allowing for good documentation with screenshots of what users will encounter with Firefox, Safari, IE, etc. –  flumignan Apr 4 '11 at 16:36
    
Note that this is an EV certificate. Some browsers check revocation lists for EV certs but not for non-EV certs. It would be good to have one that wasn't an EV cert to also test with. See e.g. news.netcraft.com/archives/2013/05/13/… –  David Eison Apr 12 '14 at 18:21

Here's a second in case anyone else stumbles upon this question (my company firewall blocks port 2443 outbound):

https://revoked.grc.com/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.