validateCertificateRevocationList
validateCertificateRevocationList
Full CRL validation: issuer name match, authority key identifier match, a v3 issuer certificate's key usage must be present and assert cRLSign (RFC 10007 §4), signature verification, thisUpdate/nextUpdate freshness check (with optional clock-skew tolerance), and the optional maxAgeMs bound on thisUpdate. A CRL that omits nextUpdate fails with stale_crl unless maxAgeMs is set.
ts
function validateCertificateRevocationList(
input: ValidateCertificateRevocationListInput,
): Promise<ValidateCertificateRevocationListResult>Parameters