Skip to main content

Process an OCSP request

POST 
/tap/api/v1/certificate/ocsp

Checks the revocation status of the certificates in a DER-encoded OCSP request and returns a signed OCSP response. Requires the OCSP responder to be enabled. Does not require a client certificate or the X-Requested-By header. A request larger than the combine.tap.ocsp.responder.request.byteLimit Configuration Value (default 8,192 bytes) receives an OCSP malformedRequest response, even when the responder is not enabled. A certificate not issued by the deployment's signer certificate authority is reported as unknown.

Request​

Responses​

The signed OCSP response, or an OCSP malformedRequest response when the request is too large.