checkCertificateRevocationAgainstCrl
End-to-end revocation check: validates the CRL (and optional delta CRL), verifies applicability via distribution-point and scope matching, then resolves the certificate's revocation status.
Returns good if the serial is absent, revoked with date/reason if present, or an error if the CRL cannot be validated or is non-applicable.
ts
function checkCertificateRevocationAgainstCrl(
input: CheckCertificateRevocationAgainstCrlInput,
): Promise<CheckCertificateRevocationAgainstCrlResult>Parameters
Examples
ts
import { checkCertificateRevocationAgainstCrl } from 'micro509';
const result = await checkCertificateRevocationAgainstCrl({
certificate: leafPem,
issuerCertificate: caPem,
crl: crlPem,
});
if (result.ok && result.value.status === 'revoked') {
console.log('revoked on', result.value.revocationDate);
}