JITC

JITC has made available the Robust Certificate Validation System (RCVS) to support the vendor, developer, and testing communities. RCVS accepts certificate status requests at https://ocsp.nsn0.rcvs.nit.disa.mil. The JITC RCVS test environment uses the Delegated Trust Model (DTM). Unlike the direct trust model used previously, a client does not require an OCSP responder certificate. The responder certificate for any given OCSP request is an OCSP signing certificate issued by the CA that issued the certificate that is being validated. These CA-issued OCSP certificates have a short lifespan and are reissued regularly. The signature should verify via the trust chain.

• Lessons Learned - Testing OCSP Responses