GB/T 19713-2005 in English

《GB/T 19713-2005信息技术 安全技术 公钥基础设施 在线证书状态协议》由TC260（全国网络安全标准化技术委员会）归口，主管部门为国家标准化管理委员会
本标准规定了一种无需请求证书撤销列表（CRL）即可查询数字证书状态的机制（即在线证书状态协议--OCSP）。该机制可代替CRL或作为周期性检查CRL的一种补充方式，以便及时获得证书撤销状态的有关信息。本标准主要描述了以下内容：a）具体描述了在线证书状态协议的请求形式；b）具体描述了在线证书状态协议的响应形式；c）分析了处理在线证书状态协议响应时可能出现的各种异常情况；d）说明了在线证书状态协议基于超文本传输协议（HTTP）的应用方式；e）提供了采用抽象语法记法1（ASN.1）描述的在线证书状态协议。 本标准适用于各类基于公开密钥基础设施的应用程序和计算环境。

Scope

This standard specifies a mechanism for querying the status of a digital certificate without requesting a certificate revocation list (CRL) (ie, the Online Certificate Status Protocol - OCSP). This mechanism can replace CRL or be used as a supplementary way to periodically check CRL, so as to obtain information about certificate revocation status in a timely manner. This standard mainly describes the following content: a) specifically describes the request form of the online certificate status protocol; b) specifically describes the response form of the online certificate status protocol; Exceptions; d) Explain the application of the online certificate status protocol based on the hypertext transfer protocol (HTTP); e) Provide the online certificate status protocol described by Abstract Syntax Notation 1 (ASN.1). This standard applies to various applications and computing environments based on public key infrastructure.