10

I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when encountering a revoked cert. The revocation can occur via either OCSP or CRL.

I've tried digging around CRLs, but they list the serial number of a certificate and don't provide a URL for me to try connecting.

Could someone provide a URL to a live site with a non-self-signed but revoked cert? Or perhaps there's a way to look up certs in a CRL and cross reference them to a URL?

11

Does this one fit the bill? https://test-sspev.verisign.com:2443/test-SSPEV-revoked-verisign.html

  • That will fit the bill! Thanks. Although there's a funny port number assigned to the URL, the user experience should be the same, allowing for good documentation with screenshots of what users will encounter with Firefox, Safari, IE, etc. – flumignan Apr 4 '11 at 16:36
  • Note that this is an EV certificate. Some browsers check revocation lists for EV certs but not for non-EV certs. It would be good to have one that wasn't an EV cert to also test with. See e.g. news.netcraft.com/archives/2013/05/13/… – David Eison Apr 12 '14 at 18:21
  • 1
    The certificate for this site is now expired :( – Felipe Mosso Dec 7 '16 at 10:28
11

Here's a second in case anyone else stumbles upon this question (my company firewall blocks port 2443 outbound):

https://revoked.grc.com/

EDIT: This is a VERY belated update, but I just discovered:

https://badssl.com/

Which, at least for me, has everything I needed to test.

1

The DigiCert Trusted Root Authority Certificates page contains links to hosts with revoked certificates (look for the text “Demo Sites for Root” on that page).

You can find a revoked EV certificate under DigiCert High Assurance EV Root CA → Demo Sites for Root → Revoked.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.