The identifier of the profile for processing the certificate status before generating an OCSP response. See below for the response settings defined by each profile.
Profile identifier | nextUpdate | id-pkix-ocsp-archive-cutoff | Status if unknown | Revocation date |
|---|---|---|---|---|
basic | — | — | revoked | Jan 1 00:00:00 1970 GMT |
archiveCutOff | — | notBefore date of the CA certificate | revoked | Jan 1 00:00:00 1970 GMT |
nextUpdate | thisUpdate + 8 hours | — | revoked | Jan 1 00:00:00 1970 GMT |
archiveCutOffWithNextUpdate | thisUpdate + 8 hours | notBefore date of the CA certificate | revoked | Jan 1 00:00:00 1970 GMT |
CRLProfile | — | — | good | — |
CRLProfileWithArchiveCutOff | — | notBefore date of the CA certificate | good | — |
SNListProfile | — | — | unknown | — |
SNListProfileWithArchiveCutOff | — | notBefore date of the CA certificate | unknown | — |
See the below for the Certificates Source and Use SN Lists values supported by each profile.
Profile identifier | Certificates Source | Use SN Lists |
|---|---|---|
basic | CAGW | — |
archiveCutOff | CAGW | — |
nextUpdate | CAGW | — |
archiveCutOffWithNextUpdate | CAGW | — |
CRLProfile | CRL | false |
CRLProfileWithArchiveCutOff | CRL | false |
SNListProfile | CRL | true |
SNListProfileWithArchiveCutOff | CRL | true |
Mandatory: Yes.
JSON data type: String.