https://nalar.dev/tags/certificates/ Recent content in Certificates on Nalar Hugo en-us Mon, 14 Sep 2026 00:00:00 +0700 https://nalar.dev/ocsp-stapling-moves-revocation-evidence-closer-to-the-tls-handshake/ Mon, 14 Sep 2026 00:00:00 +0700 https://nalar.dev/ocsp-stapling-moves-revocation-evidence-closer-to-the-tls-handshake/ <h1 id="ocsp-stapling-moves-revocation-evidence-closer-to-the-tls-handshake">OCSP Stapling Moves Revocation Evidence Closer to the TLS Handshake</h1> <p>A browser can receive a valid certificate chain, verify every signature, confirm the hostname, and still face one more question: has the issuing certificate authority revoked the leaf certificate since it was issued? That question is awkward because the certificate itself cannot carry a fresh answer. Its signed validity interval is fixed at issuance, while revocation is an event that can happen later.</p>