Certificate Status Services
Operational Characteristics
Revocation entries on a CRL or OCSP response are not removed until after the expiry date of the revoked Certificate.
Service Availability
The CA operates and maintains its CRL and OCSP capability with resources sufficient to provide a response time of ten seconds or less under normal operating conditions. Certificate status services are available on a continuous basis.
Optional Features
No stipulation.