Integrated SSL Scanning
Page 3 Finjan proprietary and confidential
Figure 1: Certificate Validation Profile
2.2.1 Certificate Revoked (CRLs)
The following table describes each option in the HTTPS certificate
validation profile:
Field Description
Unable to get certificate CRL The CRL of a certificate could
not be found.
Unable to decrypt CRL's signature The actual signature value could
not be determined (as opposed
to not matching the expected
value).
CRL signature failure The signature of the certificate
is invalid.
Certificate is not yet valid The notBefore date is after the
current time.
Certificate has expired The notAfter date is before the
current time.
Format error in CRL's lastUpdate field The CRL lastUpdate field
contains an invalid time.
Format error in CRL's nextUpdate field The CRL nextUpdate field
contains an invalid time.
Certificate revoked The certificate has been
revoked.