Integrated SSL Scanning
Page 3 Finjan proprietary and confidential
Figure 1: Certificate Validation Profile
The table below describes each option in the HTTPS certificate validation
profile:
2.2.1 Certificate Revoked (CRLs)
Unable to get certificate CRL
The CRL of a certificate could
not be found.
Unable to decrypt CRL's signature
This means that the actual
signature value could not be
determined rather than it not
matching the expected value.
The signature of the certificate
is invalid.
Certificate is not yet valid
The notBefore date is after the
current time.
The notAfter date is before the
current time.
Format error in CRL's lastUpdate field
The CRL lastUpdate field
contains an invalid time.
Format error in CRL's nextUpdate field
The CRL nextUpdate field
contains an invalid time.
The certificate has been
revoked.