OCSP Endpoints
Use OCSP metadata from issued certificates so clients can check revocation status without relying on local CRL files.
Authority Information Access
Intermediate and Leaf certificates can include an Authority Information Access extension with an OCSP endpoint.
/ocsp/<CERT ID>Why OCSP matters
OCSP lets relying parties ask for revocation status directly instead of downloading and processing full CRLs.
OCSP with RSA, EC, and ML-DSA issuers
Revocation workflows use the issuing CA's signing key. SecuriTLS supports revocation operations for RSA, elliptic curve, and ML-DSA certificate authorities; ML-DSA signing does not use a separate SHA-2 digest selection.