You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: step-ca/revocation.mdx
+1-8Lines changed: 1 addition & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,4 +1,5 @@
1
1
---
2
+
updated_at: August 19, 2025
2
3
title: Certificate Revocation
3
4
---
4
5
@@ -28,14 +29,6 @@ Web TLS certificates are valid for up to a year.
28
29
Web browsers have to check CRLs (Certificate Revocation Lists) or use OCSP (Online Certificate Status Protocol) to verify that every certificate they receive has not been revoked.
29
30
Active revocation requires clients to take an active role in certificate validation for the benefit of real-time certificate status.
30
31
31
-
<Alertseverity="info">
32
-
<AlertTitle>Need active revocation?</AlertTitle>
33
-
<div>
34
-
<Code>step-ca</Code> does not currently support active revocation mechanisms like a Certificate Revocation List (CRL) or Online Certificate Status Protocol (OCSP).
35
-
If you're sure you need it, our <ahref="https://smallstep.com/signup?product=cm">Certificate Manager Advanced Authority</a> service supports active revocation.
36
-
</div>
37
-
</Alert>
38
-
39
32
This section will walk through a few examples for revoking X.509 certificates using `step-ca`.
0 commit comments