OCSP Endpoints

Use OCSP metadata from issued certificates so clients can check revocation status without relying on local CRL files.

Authority Information Access

Intermediate and Leaf certificates can include an Authority Information Access extension with an OCSP endpoint.

/ocsp/<CERT ID>

Why OCSP matters

OCSP lets relying parties ask for revocation status directly instead of downloading and processing full CRLs.