Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when encountering a revoked cert. The revocation can occur via either OCSP or CRL.

I've tried digging around CRLs, but they list the serial number of a certificate and don't provide a URL for me to try connecting.

Could someone provide a URL to a live site with a non-self-signed but revoked cert? Or perhaps there's a way to look up certs in a CRL and cross reference them to a URL?

share|improve this question
add comment

1 Answer

up vote 6 down vote accepted

Does this one fit the bill? https://test-sspev.verisign.com:2443/test-SSPEV-revoked-verisign.html

share|improve this answer
    
That will fit the bill! Thanks. Although there's a funny port number assigned to the URL, the user experience should be the same, allowing for good documentation with screenshots of what users will encounter with Firefox, Safari, IE, etc. –  flumignan Apr 4 '11 at 16:36
    
Note that this is an EV certificate. Some browsers check revocation lists for EV certs but not for non-EV certs. It would be good to have one that wasn't an EV cert to also test with. See e.g. news.netcraft.com/archives/2013/05/13/… –  David Eison Apr 12 at 18:21
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.