OCSP Request Format Requests sent to Issuer PKI OCSP Responders are not required to be signed, but may be at the discretion of the Issuer PKI. See RFC2560 for detailed syntax. The following table lists the fields that are expected by the OCSP Responder. Field Value Version V1 (0) Requester Name DN of the requestor (required) Request List List of certificates as specified in RFC 2560 Request Extension Value None None Request Entry Extension Value None None OCSP Response Format See RFC2560 for detailed syntax. The following table lists which fields are populated by the OCSP Responder. Field Value Response Status As specified in RFC 2560 Response Type id-pkix-ocsp-basic {1 3 6 1 5 5 7 48 1 1} Version V1 (0) Responder ID Octet String (same as subject key identifier in Responder certificate) Produced At Generalized Time List of Responses Each response will contain certificate id; certificate status, thisUpdate, nextUpdate, Responder Signature sha-1WithRSAEncryption {1 2 840 113549 1 1 5} or sha256 WithRSAEncryption {1 2 840 113549 1 1 11} Certificates Applicable certificates issued to the OCSP Responder Response Extension Value Nonce c=no; Value in the nonce field of request (required, if present in request) Response Entry Extension Value None None
OCSP Request Format Requests sent to Issuer PKI OCSP Responders are not required to be signed, but may be at the discretion of the Issuer PKI. See RFC2560 for detailed syntax. The following table lists the fields that are expected by the OCSP Responder. Field Value Version V1 (0) Requester Name DN of the requestor (required) Request List List of certificates as specified in RFC 2560 Request Extension Value None None Request Entry Extension Value None None OCSP Response Format See RFC2560 for detailed syntax. The following table lists which fields are populated by the OCSP Responder. Field Value Response Status As specified in RFC 2560 Response Type id-pkix-ocsp-basic {1 3 6 1 5 5 7 48 1 1} Version V1 (0) Responder ID Octet String (same as subject key identifier in Responder certificate) Produced At Generalized Time List of Responses Each response will contain certificate id; certificate status, thisUpdate, nextUpdate, Responder Signature sha-1WithRSAEncryption {1 2 840 113549 1 1 5} or sha256 WithRSAEncryption {1 2 840 113549 1 1 11} Certificates Applicable certificates issued to the OCSP Responder Response Extension Value Nonce c=no; Value in the nonce field of request (required, if present in request) Response Entry Extension Value None None