はじめに

証明書の失効情報を管理しているCRLを勉強したので、実際に証明局で利用されているCRLを確認してみる。

環境

1
2
3
4
5
MacOS Sonoma 14.4.1
Chrome バージョン: 123.0.6312.87(Official Build) (x86_64)

確認する証明書(k-bushi.com)
ルート認証局: Google Trust Services LLC, GTS Root R1

CRLとは?

CRLとは有効期限よりも前に失効させたデジタル証明書の一覧。
有効期限内に失効した証明書のシリアル番号と失効日が記録されている。
これは、すべての認証局で共通のものではなく、認証局毎に作成・更新されるリストとなっている。

ChromeでCRLを確認する

  1. ブラウザバーの左にあるボタンを押す。
  2. 「この接続は保護されています」→「証明書は有効です」を押す。
  3. 「証明書の階層」で「k-bushi.com」を押す。
  4. 「証明書のフィールド」→「CRL配布ポイント」に記載のURLを確認する。
server-certificate-view-01

証明書のCRL配布ポイントを確認する

CRL配布ポイントのURLは以下となっていた。

1
2
非重要
URI: http://crls.pki.goog/gts1p5/v5VT_64JizM.crl

このURLにアクセスすると、ファイルがダウンロードされる。 ダウンロード後は以下のコマンドで中身を確認する。

1
openssl crl -inform der -in [ダウンロードしたCRLファイル名] -text
1
openssl crl -inform der -in v5VT_64JizM.crl -text
crl-check-01
Certificate Revocation List (CRL):
        Version 2 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS CA 1P5
        Last Update: Mar 28 05:59:18 2024 GMT
        Next Update: Apr  7 04:59:17 2024 GMT
        CRL extensions:
            X509v3 Authority Key Identifier: 
                D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
            X509v3 CRL Number: 
                4809
            X509v3 Issuing Distribution Point: critical
                Full Name:
                  URI:http://crls.pki.goog/gts1p5/v5VT_64JizM.crl                Only User Certificates

Revoked Certificates: Serial Number: 742FACFF4AA963481321115EAC4E86FD Revocation Date: Mar 24 09:18:11 2024 GMT Serial Number: 02DE089EC80C7E050ED9F4807F2FE801 Revocation Date: Mar 24 09:18:32 2024 GMT Serial Number: CDDB378825E51BC20E93D60FB7E78340 Revocation Date: Mar 24 10:35:36 2024 GMT Serial Number: AD7598FC30FAABC513499F802134EAC3 Revocation Date: Mar 24 11:34:36 2024 GMT Serial Number: C4F8B8ABC4745B830E476A2EEF5A2C07 Revocation Date: Mar 24 11:34:37 2024 GMT Serial Number: 4EB7BD08D36172160E70B5678799051B Revocation Date: Mar 24 16:45:08 2024 GMT Serial Number: B02B61C9E5897B6D137E0F6390F22C6F Revocation Date: Mar 24 16:45:14 2024 GMT Serial Number: CA78ABA2753AD6DA135020E4BEC23CB2 Revocation Date: Mar 24 17:31:43 2024 GMT Serial Number: 3D4383ED162EDCC70D56A970547155FB Revocation Date: Mar 24 18:35:58 2024 GMT Serial Number: E1323BF5858159EF1191871005640E98 Revocation Date: Mar 24 20:24:15 2024 GMT Serial Number: EF12B1038E051B370D096090652B5C93 Revocation Date: Mar 24 23:58:28 2024 GMT Serial Number: FBC0081FDDC948880E664CD2F91AAABC Revocation Date: Mar 25 00:07:08 2024 GMT Serial Number: 6DE436D7B1F36DC4134133EA710FA64E Revocation Date: Mar 25 01:49:17 2024 GMT Serial Number: B91CF97027D94B4A0E6799066FEB3004 Revocation Date: Mar 25 02:39:25 2024 GMT Serial Number: 5845EBFA4AD7BAAB1187EE4FD8A3D2BF Revocation Date: Mar 25 02:53:29 2024 GMT Serial Number: E8C64178A16D3C0511DA41FD1AF383F9 Revocation Date: Mar 25 03:47:47 2024 GMT Serial Number: 2784921481B1C9B313496827C138FFB5 Revocation Date: Mar 25 03:51:47 2024 GMT Serial Number: 78F84EF2AEAFA3AD136E02E982F6D353 Revocation Date: Mar 25 06:59:34 2024 GMT Serial Number: F3490B2A60304B3C11EFE9F47F6AA104 Revocation Date: Mar 25 07:08:43 2024 GMT Serial Number: C19775089CCF2BC50DAA0C1BCA3034DD Revocation Date: Mar 25 07:08:43 2024 GMT Serial Number: 2E3072B56CC34B5E11DC38135B9DA6B9 Revocation Date: Mar 25 08:42:16 2024 GMT Serial Number: 52E95F71DD8CC57C1185E9716742EB6B Revocation Date: Mar 25 09:33:34 2024 GMT Serial Number: 99D02E13FD4E17DA0D83740F111ABB73 Revocation Date: Mar 25 09:33:58 2024 GMT Serial Number: F780F683FA0EBBA40D1CFA5D3C47212A Revocation Date: Mar 25 09:44:09 2024 GMT Serial Number: 78499D58FA5160B3115AC31669134FA7 Revocation Date: Mar 25 10:17:23 2024 GMT Serial Number: F36080283506808313A478069B5CF323 Revocation Date: Mar 25 10:18:24 2024 GMT Serial Number: 6296F408766E11BE0D7B29B4AA50062E Revocation Date: Mar 25 11:23:38 2024 GMT Serial Number: 52A0174B450683DD13E0CEF38573862A Revocation Date: Mar 25 11:41:23 2024 GMT Serial Number: 8DF860E8CCD1E76613041DD45FBD6EEE Revocation Date: Mar 25 12:58:07 2024 GMT Serial Number: 7A7B7A285C1275E0131177439857B1E0 Revocation Date: Mar 25 13:06:33 2024 GMT Serial Number: B341174C67463720138830FCDE055516 Revocation Date: Mar 25 13:52:25 2024 GMT Serial Number: 8703B3810BC3D6120DCC7E13219EA6EA Revocation Date: Mar 25 14:06:05 2024 GMT Serial Number: 77B6FEABF8BD162D13C7B6AFD4CCA1A7 Revocation Date: Mar 25 14:57:44 2024 GMT Serial Number: 7C94C2E96CF53E8A0D6F249EDA4BC277 Revocation Date: Mar 25 17:24:43 2024 GMT Serial Number: E0EF455CC2AD0C680DB7CDCDFEC75C52 Revocation Date: Mar 25 18:24:50 2024 GMT Serial Number: 485FBFB01DE3996C0D6910534FE7A88A Revocation Date: Mar 25 18:34:05 2024 GMT Serial Number: C59E270946B855510E2D30B562D02093 Revocation Date: Mar 25 19:21:19 2024 GMT Serial Number: 20E4036A7377A4501349281FE094C051 Revocation Date: Mar 25 19:54:54 2024 GMT Serial Number: 546B90BB7E447E7D136A56EC1AFA8F8A Revocation Date: Mar 25 20:14:34 2024 GMT Serial Number: 1DAEEA7753637DA713F530653C658C7A Revocation Date: Mar 25 22:22:45 2024 GMT Serial Number: 71DBDA296990385B0E04AFC0D4F97635 Revocation Date: Mar 25 22:22:45 2024 GMT Serial Number: E9C12CEAB0EC1BE60E2D07B529843122 Revocation Date: Mar 25 22:33:17 2024 GMT Serial Number: FCFC7848DD1CEA280D355E6692D022B0 Revocation Date: Mar 25 22:52:02 2024 GMT Serial Number: A2AAC07609C209541191475FCBAE1000 Revocation Date: Mar 26 00:44:32 2024 GMT Serial Number: C816B6A70B7EADB50E277AAB11381D30 Revocation Date: Mar 26 03:47:48 2024 GMT Serial Number: 01AD708D997AAD800D3E1A72EA470FF3 Revocation Date: Mar 26 04:26:22 2024 GMT Serial Number: 10256C9B9918DEF7134E6D3DC1AEC2B9 Revocation Date: Mar 26 05:35:45 2024 GMT Serial Number: 44B81549FEFC27DC11EC79A21C8F6712 Revocation Date: Mar 26 06:00:38 2024 GMT Serial Number: 657E1A4F01E7F19C132B1648984692A7 Revocation Date: Mar 26 06:00:40 2024 GMT Serial Number: ADD2EB976BBC70741318F3215CC6F11A Revocation Date: Mar 26 06:29:26 2024 GMT Serial Number: E8B8790E0794BF960E1C406366B3E5C2 Revocation Date: Mar 26 06:29:27 2024 GMT Serial Number: EC10D8E5F806BAF6139C205337503689 Revocation Date: Mar 26 07:18:28 2024 GMT Serial Number: B9BD5CC23F3566B40E4D385C10D5E048 Revocation Date: Mar 26 09:00:12 2024 GMT Serial Number: 8890C663130C5FE913B3A0B3BD8A1BAF Revocation Date: Mar 26 10:15:59 2024 GMT Serial Number: 8762E95FC2FBF9AF0EA5BA3EED31C6D4 Revocation Date: Mar 26 10:55:29 2024 GMT Serial Number: B6D9BE7A15A9999511A20D057F9AA69F Revocation Date: Mar 26 12:52:54 2024 GMT Serial Number: 40BB8DAFAD91E39D0E75F17E9909C34C Revocation Date: Mar 26 14:16:32 2024 GMT Serial Number: E6D5388D1C5C9C460D0E17017CC46DE5 Revocation Date: Mar 26 14:44:33 2024 GMT Serial Number: E0DB1B9E5B645FD60E4FD331A6C2E283 Revocation Date: Mar 26 14:53:33 2024 GMT Serial Number: BDB27221ED948DA90DDA0667983FF88E Revocation Date: Mar 26 16:52:19 2024 GMT Serial Number: 1A97CCDBFD2082DF13ABEFD55E9FF7BD Revocation Date: Mar 26 16:52:51 2024 GMT Serial Number: A3B7FD9B558540620D54F03DF631423A Revocation Date: Mar 26 16:59:15 2024 GMT Serial Number: FE54F536AED43B040EC7E02A4B2D565B Revocation Date: Mar 26 17:00:42 2024 GMT Serial Number: 46906BC60A138C9B11BE9383A3982C01 Revocation Date: Mar 26 17:35:10 2024 GMT Serial Number: 79A25F8273FB3949135DECE3E41BB59A Revocation Date: Mar 26 17:35:09 2024 GMT Serial Number: 2020EAA9EDBAD4C113E88429C51CF7DE Revocation Date: Mar 26 19:27:53 2024 GMT Serial Number: DCA63F50EBF66EA20E50C96EE9DAE142 Revocation Date: Mar 26 19:37:28 2024 GMT Serial Number: 5D8F8CD76A65F8E913EAEADD27F276AC Revocation Date: Mar 26 19:40:08 2024 GMT Serial Number: 1782E7EDE030DCB511DBB4CCC682C310 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 3605F856F5694FE20DD1A865BF825802 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 62610690EEAF6B270D349F9448C5B0B8 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 7173E8D1878057BE0E5E30CE38106C8F Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 7AC48BF9509073FA11F1769409952DF9 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 9111780FAC7194780DDDE7DC21776B07 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: A115F36A5E0BE7CA0DB3E3E54960D343 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: BF1B544637BE3ABD0DD5263E68E57ED4 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: D9A3F8B0DD486694117263153596CDA7 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 56E505E734B4124311FE57589BB1221E Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: 875DFA5D74E82C970DC58D61B0DF1995 Revocation Date: Mar 26 20:07:02 2024 GMT Serial Number: CE0A13A971DF4D84117024C02E1FF6D9 Revocation Date: Mar 26 20:07:04 2024 GMT Serial Number: 52F0ACC50F413F130D4AE3FE64C9EB64 Revocation Date: Mar 26 20:07:04 2024 GMT Serial Number: 0415CA63F0AC51821172C55CED453147 Revocation Date: Mar 26 20:07:03 2024 GMT Serial Number: 548F9913CAB996BD0D477A7C141DEC17 Revocation Date: Mar 26 20:07:03 2024 GMT Serial Number: 77DB1B0874EE8CAB11853A8E9EFE0785 Revocation Date: Mar 26 20:07:03 2024 GMT Serial Number: 121DE0475019B45D13F07803211A0285 Revocation Date: Mar 26 20:29:06 2024 GMT Serial Number: D28AE7602D4E5369137A3CAAA13D5AE7 Revocation Date: Mar 26 20:32:16 2024 GMT Serial Number: 3C24D2056E0D8B240D3260B7573B2121 Revocation Date: Mar 26 20:32:18 2024 GMT Serial Number: AD373BF83CC6EB940E834CD7405BF4ED Revocation Date: Mar 26 20:52:37 2024 GMT Serial Number: 8721AF71D7266D650EAE45B24D21E901 Revocation Date: Mar 26 20:59:15 2024 GMT Serial Number: 5CF6C88D55C2CD930DD7C9B82946F82A Revocation Date: Mar 26 21:00:17 2024 GMT Serial Number: 1B1AC5C9EEE96A9611D95A184BE920F9 Revocation Date: Mar 26 21:10:57 2024 GMT Serial Number: F41E9DF9C79A178F0E6B13CCFC58ADCD Revocation Date: Mar 26 23:05:29 2024 GMT Serial Number: 4B1639AC78E7CFB10D57DC85479F35EC Revocation Date: Mar 27 00:25:24 2024 GMT Serial Number: 690F486BFDA063E30D86D9FD54C4656B Revocation Date: Mar 27 00:25:28 2024 GMT Serial Number: 011A8FFB03F158FF132A4BB317772890 Revocation Date: Mar 27 01:00:09 2024 GMT Serial Number: B18D95651E4CEE0F133C5B508BB4C949 Revocation Date: Mar 27 01:15:12 2024 GMT Serial Number: C5473CBCCB4D8A6A0D76C134F4E20720 Revocation Date: Mar 27 01:46:14 2024 GMT Serial Number: 09A358B2B4DB2B52116389C2D44649F2 Revocation Date: Mar 27 01:50:23 2024 GMT Serial Number: 790E6FC001C3D7670D00AAE6C9531B42 Revocation Date: Mar 27 01:58:59 2024 GMT Serial Number: A9674BC9320DDB8D1103511773B9DCA9 Revocation Date: Mar 27 02:02:29 2024 GMT Serial Number: 08EEF8EA7FFACFB7115BA8176990D895 Revocation Date: Mar 27 02:34:51 2024 GMT Serial Number: BC7C30BAF61705070D127695A8781677 Revocation Date: Mar 27 02:34:48 2024 GMT Serial Number: 325FC703012060140ECEB1735A0A33B1 Revocation Date: Mar 27 02:55:31 2024 GMT Serial Number: D3F409C0620A4ABC1362D7C9D8E77182 Revocation Date: Mar 27 03:13:56 2024 GMT Serial Number: 515860087169E9DC132F824922CDB7DF Revocation Date: Mar 27 06:33:24 2024 GMT Serial Number: B0276EE98BBC270A0DB36BB8BFD88B88 Revocation Date: Mar 27 06:37:50 2024 GMT Serial Number: 347664B799CE180311E11CC154407F61 Revocation Date: Mar 27 06:37:52 2024 GMT Serial Number: ECF426ADACD9B72C1151B4AA3B7790EF Revocation Date: Mar 27 08:26:24 2024 GMT Serial Number: 602B130C966AFE1E130180DB8033B75F Revocation Date: Mar 27 09:09:13 2024 GMT Serial Number: A3497004DED2FDFE114E8B065BF1C08E Revocation Date: Mar 27 09:27:18 2024 GMT Serial Number: C95C96DE8F2625800E66E030872C5B68 Revocation Date: Mar 27 09:27:29 2024 GMT Serial Number: 7A703D346E05D7580D14E3C033D8F8D7 Revocation Date: Mar 27 11:11:38 2024 GMT Serial Number: 3AD509A9BCA207610D1406F3911BDE50 Revocation Date: Mar 27 11:27:36 2024 GMT Serial Number: 1699367B5302CC1611C9F5F1A26B36E9 Revocation Date: Mar 27 11:27:39 2024 GMT Serial Number: BF2497F0FB0682A40EEBAA33F7262993 Revocation Date: Mar 27 11:35:22 2024 GMT Serial Number: B4F820965B885D950EA69DC356A5581A Revocation Date: Mar 27 11:50:35 2024 GMT Serial Number: E7EAF9FA7CF4694213D5B669790A6089 Revocation Date: Mar 27 15:16:34 2024 GMT Serial Number: C0EAC3930489C4A80D0561523DBB5245 Revocation Date: Mar 27 15:27:15 2024 GMT Serial Number: 41040303C93D57D013ED891A9E81C0B6 Revocation Date: Mar 27 15:27:30 2024 GMT Serial Number: 92EC2733059A8C590EAD08D711F6EDFE Revocation Date: Mar 27 15:35:31 2024 GMT Serial Number: 213C11AFBC911B201306568F605A87E8 Revocation Date: Mar 27 17:14:34 2024 GMT Serial Number: E63C42646644E7640D0E449C07823355 Revocation Date: Mar 27 17:18:11 2024 GMT Serial Number: F8B2D659F6D1CD840D1981DD3ADF56D7 Revocation Date: Mar 27 17:37:35 2024 GMT Serial Number: 4D4100A20CDB61FD0D7B3A9B5402972A Revocation Date: Mar 27 18:01:50 2024 GMT Serial Number: 142A025C52057D5D0D43E27E3B234000 Revocation Date: Mar 27 21:39:33 2024 GMT Serial Number: 05653B56CEA84CFB0D7EEF769C5E5363 Revocation Date: Mar 27 21:46:14 2024 GMT Serial Number: 3BE05578DAF84BFA134328505C91344E Revocation Date: Mar 27 22:09:24 2024 GMT Serial Number: 177AAD8404F863910DABD8F7CB1AA1F9 Revocation Date: Mar 27 22:28:34 2024 GMT Serial Number: 7BE1E68DF830E09F0D5186989E72D3BA Revocation Date: Mar 28 00:08:56 2024 GMT Serial Number: D937F9F9E0D5C5CD0DFE20E81F990239 Revocation Date: Mar 28 00:35:14 2024 GMT Serial Number: 1862E222E424C6680ED4503DB5EF1410 Revocation Date: Mar 28 00:46:26 2024 GMT Serial Number: 4B0FF46F4260758C0D40EBE8B567C036 Revocation Date: Mar 28 01:46:55 2024 GMT Serial Number: 4F739E3BF6E082F60E2AF679C23326F6 Revocation Date: Mar 28 02:03:07 2024 GMT Serial Number: 5C60E2A4D6ECF99A13B371E0FB4DBA5A Revocation Date: Mar 28 02:03:07 2024 GMT Serial Number: 253CDCC4BCA58A0C0DE63449EC9F38DE Revocation Date: Mar 28 04:05:04 2024 GMT Serial Number: 8243F09C444B866F11083D78E2F68604 Revocation Date: Mar 28 04:05:05 2024 GMT Serial Number: 3AB469A7E0BAF2D90D72CC78F770A793 Revocation Date: Mar 28 04:05:05 2024 GMT Serial Number: 0705B6EE0B638CE2112568F315680335 Revocation Date: Mar 28 04:05:04 2024 GMT Serial Number: A7A703DF0B1A53F41161C4C5A6A36479 Revocation Date: Mar 28 04:05:04 2024 GMT Serial Number: DFD1B332A299402C0D5A5C53783B3CE7 Revocation Date: Mar 28 04:18:31 2024 GMT Serial Number: 4206198FA8AF579D136E3C134FFBE936 Revocation Date: Mar 28 04:18:31 2024 GMT Serial Number: A7C9849D1F48BDC50E28FFF7B5D43747 Revocation Date: Mar 28 04:18:31 2024 GMT Serial Number: DEAFAC81B780CEBE1160D4D440264204 Revocation Date: Jan 4 01:00:33 2024 GMT Serial Number: 4AE9D3114692992A139192FF7BE1960F Revocation Date: Jan 5 01:00:49 2024 GMT Serial Number: 3928C55FF297A775138FD71E6321A2AD Revocation Date: Jan 8 01:00:57 2024 GMT Serial Number: D351B3F32E6E71D91151D65E46B90151 Revocation Date: Jan 11 01:00:45 2024 GMT Serial Number: 52E42FD43FF81DB21327DCB286647109 Revocation Date: Jan 18 14:17:09 2024 GMT Serial Number: CCB16ECEF83804160D9A6306C8B678C3 Revocation Date: Jan 17 17:23:19 2024 GMT Serial Number: 5D3318F017CEC12A0E0436B4D9192BC8 Revocation Date: Jan 19 19:05:46 2024 GMT Serial Number: 1E8765926343849E1143A00CF821FA9D Revocation Date: Jan 21 01:01:19 2024 GMT Serial Number: A92DA73AAB8725AE0D464B48F5540860 Revocation Date: Jan 22 01:00:52 2024 GMT Serial Number: DDCA9C64935D46840D12FB7DC4080198 Revocation Date: Mar 24 01:00:30 2024 GMT Serial Number: 58C53EA7BD8C30E10D64E608AF8D5554 Revocation Date: Jan 23 09:28:12 2024 GMT Serial Number: E5C74C345DC6530A116BE55A77591671 Revocation Date: Jan 25 01:01:15 2024 GMT Serial Number: A15C429DB3C34EE60D84B7F7B533A1B5 Revocation Date: Jan 26 01:01:08 2024 GMT Serial Number: D734ACDF2758F1BD0D3C9D70758BE37E Revocation Date: Jan 24 07:36:48 2024 GMT Serial Number: AEDA2D9A35D482D10E7072BC27109A7D Revocation Date: Jan 24 07:36:53 2024 GMT Serial Number: 26905B10D52F141F13D8678A29B6D730 Revocation Date: Jan 29 01:00:59 2024 GMT Serial Number: 38EF4CB2B60990F0117E4BA8E3897633 Revocation Date: Jan 31 01:01:01 2024 GMT Serial Number: 81B2462BB7125831138436B45D2D340C Revocation Date: Feb 7 01:01:08 2024 GMT Serial Number: 66BE03565C163EA00D681DA34F4D2937 Revocation Date: Mar 7 01:00:22 2024 GMT Serial Number: 335B690A9A0B738B135268966CA6587E Revocation Date: Feb 14 01:00:32 2024 GMT Serial Number: B07B7B46139E18480D6736993C245E2B Revocation Date: Feb 18 01:00:54 2024 GMT Serial Number: FC699E7E0F8C34F50E71778BF3885F79 Revocation Date: Feb 19 15:13:44 2024 GMT Serial Number: 51B12599CC8A409E115B36C3DC737CF0 Revocation Date: Feb 22 01:01:20 2024 GMT Serial Number: 4CC32BBC91865CE211347B57F2C7ADC7 Revocation Date: Feb 22 01:01:05 2024 GMT Serial Number: 3706BC8C2CE34C8A13849F37FC03ADB0 Revocation Date: Feb 28 01:00:36 2024 GMT Serial Number: B998C8EAE05BB965134BAF9D68D32809 Revocation Date: Feb 29 01:00:30 2024 GMT Serial Number: 75DAC23580494AED117788C7467D7516 Revocation Date: Mar 3 01:00:27 2024 GMT Serial Number: 881AE51E856793390E7A73ABD805D746 Revocation Date: Mar 2 07:58:27 2024 GMT Serial Number: 20A7B833244DB2851399659A7BCFB14B Revocation Date: Mar 11 01:00:47 2024 GMT Serial Number: 3E858A020CFBC6580E21090531F7BC3A Revocation Date: Mar 24 01:01:21 2024 GMT Serial Number: DB96B775F59C9A0C13A089E785827621 Revocation Date: Mar 25 01:00:47 2024 GMT Serial Number: D6D06819086F52DF0DF90C5BE8488451 Revocation Date: Mar 26 01:00:36 2024 GMT Serial Number: 3EE1DDAC052623BE13A87FBFB4124999 Revocation Date: Mar 27 01:01:29 2024 GMT Signature Algorithm: sha256WithRSAEncryption Signature Value: 78:69:02:5b:36:4d:8c:c9:03:60:4b:26:cc:6b:44:ae:87:73: b2:7e:54:3f:c2:a4:ee:df:cf:86:ae:66:97:d3:2c:10:48:fd: 8b:73:96:44:1b:0c:da:a9:d7:b5:38:3a:31:4b:b8:80💿08: e3:d0:87:b1:b0:6b:25:48:3f:21:46:21:ed:10:f8:cc:84:e6: a2:f6:ac:10:25:71:19:36:0d:78:d5:d7:5d:79:ee:c7:93:c4: 59:d1:ae:a7:e2:c1:2c:55:e1:f9:c6:17:fb:43:51:c0:18:77: a8:3a:b9:9d:34:48:f9:6e:4f:0d:ea:d3:f8:90:2a:2d:14:27: 08:f2:6c:39:ec:46:16:29:99:d2:8a:22:e0:85:85:75:86:22: 82:c4:b1:08:26:c5:27:34:0f:b3:2a:e4:46:59:88:9c:84:c9: 5d:dd:30:fa:c8:0a:35:a2:33:17:65:c2:a5:64:92:9c:0a:d9: 83:7e:1b:36:88:58:0f:62:0a:a5:75:8f:58:47:c6:01:2d:49: 21:00:7f:01:a3:bd:97:e3:6e:30:d2:c3:ec:fd:a3:10:f4:e1: 16:6a:9d:a5:2e:26:ff:19:ee:8a:b2:03:2b:3f:25:af:ef:43: 2f:5a:88:e3:b2:7b:28:20:00:8d:01:c0:2d:54:54:bd:53:15: de:c1:57:a5 —–BEGIN X509 CRL—– MIIaSTCCGTECAQEwDQYJKoZIhvcNAQELBQAwRjELMAkGA1UEBhMCVVMxIjAgBgNV BAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxEzARBgNVBAMTCkdUUyBDQSAx UDUXDTI0MDMyODA1NTkxOFoXDTI0MDQwNzA0NTkxN1owghhBMCECEHQvrP9KqWNI EyERXqxOhv0XDTI0MDMyNDA5MTgxMVowIQIQAt4InsgMfgUO2fSAfy/oARcNMjQw MzI0MDkxODMyWjAiAhEAzds3iCXlG8IOk9YPt+eDQBcNMjQwMzI0MTAzNTM2WjAi AhEArXWY/DD6q8UTSZ+AITTqwxcNMjQwMzI0MTEzNDM2WjAiAhEAxPi4q8R0W4MO R2ou71osBxcNMjQwMzI0MTEzNDM3WjAhAhBOt70I02FyFg5wtWeHmQUbFw0yNDAz MjQxNjQ1MDhaMCICEQCwK2HJ5Yl7bRN+D2OQ8ixvFw0yNDAzMjQxNjQ1MTRaMCIC EQDKeKuidTrW2hNQIOS+wjyyFw0yNDAzMjQxNzMxNDNaMCECED1Dg+0WLtzHDVap cFRxVfsXDTI0MDMyNDE4MzU1OFowIgIRAOEyO/WFgVnvEZGHEAVkDpgXDTI0MDMy NDIwMjQxNVowIgIRAO8SsQOOBRs3DQlgkGUrXJMXDTI0MDMyNDIzNTgyOFowIgIR APvACB/dyUiIDmZM0vkaqrwXDTI0MDMyNTAwMDcwOFowIQIQbeQ217HzbcQTQTPq cQ+mThcNMjQwMzI1MDE0OTE3WjAiAhEAuRz5cCfZS0oOZ5kGb+swBBcNMjQwMzI1 MDIzOTI1WjAhAhBYRev6Ste6qxGH7k/Yo9K/Fw0yNDAzMjUwMjUzMjlaMCICEQDo xkF4oW08BRHaQf0a84P5Fw0yNDAzMjUwMzQ3NDdaMCECECeEkhSBscmzE0loJ8E4 /7UXDTI0MDMyNTAzNTE0N1owIQIQePhO8q6vo60TbgLpgvbTUxcNMjQwMzI1MDY1 OTM0WjAiAhEA80kLKmAwSzwR7+n0f2qhBBcNMjQwMzI1MDcwODQzWjAiAhEAwZd1 CJzPK8UNqgwbyjA03RcNMjQwMzI1MDcwODQzWjAhAhAuMHK1bMNLXhHcOBNbnaa5 Fw0yNDAzMjUwODQyMTZaMCECEFLpX3HdjMV8EYXpcWdC62sXDTI0MDMyNTA5MzMz NFowIgIRAJnQLhP9ThfaDYN0DxEau3MXDTI0MDMyNTA5MzM1OFowIgIRAPeA9oP6 DrukDRz6XTxHISoXDTI0MDMyNTA5NDQwOVowIQIQeEmdWPpRYLMRWsMWaRNPpxcN MjQwMzI1MTAxNzIzWjAiAhEA82CAKDUGgIMTpHgGm1zzIxcNMjQwMzI1MTAxODI0 WjAhAhBilvQIdm4Rvg17KbSqUAYuFw0yNDAzMjUxMTIzMzhaMCECEFKgF0tFBoPd E+DO84VzhioXDTI0MDMyNTExNDEyM1owIgIRAI34YOjM0edmEwQd1F+9bu4XDTI0 MDMyNTEyNTgwN1owIQIQent6KFwSdeATEXdDmFex4BcNMjQwMzI1MTMwNjMzWjAi AhEAs0EXTGdGNyATiDD83gVVFhcNMjQwMzI1MTM1MjI1WjAiAhEAhwOzgQvD1hIN zH4TIZ6m6hcNMjQwMzI1MTQwNjA1WjAhAhB3tv6r+L0WLRPHtq/UzKGnFw0yNDAz MjUxNDU3NDRaMCECEHyUwuls9T6KDW8kntpLwncXDTI0MDMyNTE3MjQ0M1owIgIR AODvRVzCrQxoDbfNzf7HXFIXDTI0MDMyNTE4MjQ1MFowIQIQSF+/sB3jmWwNaRBT T+eoihcNMjQwMzI1MTgzNDA1WjAiAhEAxZ4nCUa4VVEOLTC1YtAgkxcNMjQwMzI1 MTkyMTE5WjAhAhAg5ANqc3ekUBNJKB/glMBRFw0yNDAzMjUxOTU0NTRaMCECEFRr kLt+RH59E2pW7Br6j4oXDTI0MDMyNTIwMTQzNFowIQIQHa7qd1NjfacT9TBlPGWM ehcNMjQwMzI1MjIyMjQ1WjAhAhBx29opaZA4Ww4Er8DU+XY1Fw0yNDAzMjUyMjIy NDVaMCICEQDpwSzqsOwb5g4tB7UphDEiFw0yNDAzMjUyMjMzMTdaMCICEQD8/HhI 3RzqKA01XmaS0CKwFw0yNDAzMjUyMjUyMDJaMCICEQCiqsB2CcIJVBGRR1/LrhAA Fw0yNDAzMjYwMDQ0MzJaMCICEQDIFranC36ttQ4neqsROB0wFw0yNDAzMjYwMzQ3 NDhaMCECEAGtcI2Zeq2ADT4acupHD/MXDTI0MDMyNjA0MjYyMlowIQIQECVsm5kY 3vcTTm09wa7CuRcNMjQwMzI2MDUzNTQ1WjAhAhBEuBVJ/vwn3BHseaIcj2cSFw0y NDAzMjYwNjAwMzhaMCECEGV+Gk8B5/GcEysWSJhGkqcXDTI0MDMyNjA2MDA0MFow IgIRAK3S65drvHB0ExjzIVzG8RoXDTI0MDMyNjA2MjkyNlowIgIRAOi4eQ4HlL+W DhxAY2az5cIXDTI0MDMyNjA2MjkyN1owIgIRAOwQ2OX4Brr2E5wgUzdQNokXDTI0 MDMyNjA3MTgyOFowIgIRALm9XMI/NWa0Dk04XBDV4EgXDTI0MDMyNjA5MDAxMlow IgIRAIiQxmMTDF/pE7Ogs72KG68XDTI0MDMyNjEwMTU1OVowIgIRAIdi6V/C+/mv DqW6Pu0xxtQXDTI0MDMyNjEwNTUyOVowIgIRALbZvnoVqZmVEaINBX+app8XDTI0 MDMyNjEyNTI1NFowIQIQQLuNr62R450OdfF+mQnDTBcNMjQwMzI2MTQxNjMyWjAi AhEA5tU4jRxcnEYNDhcBfMRt5RcNMjQwMzI2MTQ0NDMzWjAiAhEA4NsbnltkX9YO T9MxpsLigxcNMjQwMzI2MTQ1MzMzWjAiAhEAvbJyIe2UjakN2gZnmD/4jhcNMjQw MzI2MTY1MjE5WjAhAhAal8zb/SCC3xOr79Ven/e9Fw0yNDAzMjYxNjUyNTFaMCIC EQCjt/2bVYVAYg1U8D32MUI6Fw0yNDAzMjYxNjU5MTVaMCICEQD+VPU2rtQ7BA7H 4CpLLVZbFw0yNDAzMjYxNzAwNDJaMCECEEaQa8YKE4ybEb6Tg6OYLAEXDTI0MDMy NjE3MzUxMFowIQIQeaJfgnP7OUkTXezj5Bu1mhcNMjQwMzI2MTczNTA5WjAhAhAg IOqp7brUwRPohCnFHPfeFw0yNDAzMjYxOTI3NTNaMCICEQDcpj9Q6/Zuog5QyW7p 2uFCFw0yNDAzMjYxOTM3MjhaMCECEF2PjNdqZfjpE+rq3SfydqwXDTI0MDMyNjE5 NDAwOFowIQIQF4Ln7eAw3LUR27TMxoLDEBcNMjQwMzI2MjAwNzAyWjAhAhA2BfhW 9WlP4g3RqGW/glgCFw0yNDAzMjYyMDA3MDJaMCECEGJhBpDur2snDTSflEjFsLgX DTI0MDMyNjIwMDcwMlowIQIQcXPo0YeAV74OXjDOOBBsjxcNMjQwMzI2MjAwNzAy WjAhAhB6xIv5UJBz+hHxdpQJlS35Fw0yNDAzMjYyMDA3MDJaMCICEQCREXgPrHGU eA3d59whd2sHFw0yNDAzMjYyMDA3MDJaMCICEQChFfNqXgvnyg2z4+VJYNNDFw0y NDAzMjYyMDA3MDJaMCICEQC/G1RGN746vQ3VJj5o5X7UFw0yNDAzMjYyMDA3MDJa MCICEQDZo/iw3UhmlBFyYxU1ls2nFw0yNDAzMjYyMDA3MDJaMCECEFblBec0tBJD Ef5XWJuxIh4XDTI0MDMyNjIwMDcwMlowIgIRAIdd+l106CyXDcWNYbDfGZUXDTI0 MDMyNjIwMDcwMlowIgIRAM4KE6lx302EEXAkwC4f9tkXDTI0MDMyNjIwMDcwNFow IQIQUvCsxQ9BPxMNSuP+ZMnrZBcNMjQwMzI2MjAwNzA0WjAhAhAEFcpj8KxRghFy xVztRTFHFw0yNDAzMjYyMDA3MDNaMCECEFSPmRPKuZa9DUd6fBQd7BcXDTI0MDMy NjIwMDcwM1owIQIQd9sbCHTujKsRhTqOnv4HhRcNMjQwMzI2MjAwNzAzWjAhAhAS HeBHUBm0XRPweAMhGgKFFw0yNDAzMjYyMDI5MDZaMCICEQDSiudgLU5TaRN6PKqh PVrnFw0yNDAzMjYyMDMyMTZaMCECEDwk0gVuDYskDTJgt1c7ISEXDTI0MDMyNjIw MzIxOFowIgIRAK03O/g8xuuUDoNM10Bb9O0XDTI0MDMyNjIwNTIzN1owIgIRAIch r3HXJm1lDq5Fsk0h6QEXDTI0MDMyNjIwNTkxNVowIQIQXPbIjVXCzZMN18m4KUb4 KhcNMjQwMzI2MjEwMDE3WjAhAhAbGsXJ7ulqlhHZWhhL6SD5Fw0yNDAzMjYyMTEw NTdaMCICEQD0Hp35x5oXjw5rE8z8WK3NFw0yNDAzMjYyMzA1MjlaMCECEEsWOax4 58+xDVfchUefNewXDTI0MDMyNzAwMjUyNFowIQIQaQ9Ia/2gY+MNhtn9VMRlaxcN MjQwMzI3MDAyNTI4WjAhAhABGo/7A/FY/xMqS7MXdyiQFw0yNDAzMjcwMTAwMDla MCICEQCxjZVlHkzuDxM8W1CLtMlJFw0yNDAzMjcwMTE1MTJaMCICEQDFRzy8y02K ag12wTT04gcgFw0yNDAzMjcwMTQ2MTRaMCECEAmjWLK02ytSEWOJwtRGSfIXDTI0 MDMyNzAxNTAyM1owIQIQeQ5vwAHD12cNAKrmyVMbQhcNMjQwMzI3MDE1ODU5WjAi AhEAqWdLyTIN240RA1EXc7ncqRcNMjQwMzI3MDIwMjI5WjAhAhAI7vjqf/rPtxFb qBdpkNiVFw0yNDAzMjcwMjM0NTFaMCICEQC8fDC69hcFBw0SdpWoeBZ3Fw0yNDAz MjcwMjM0NDhaMCECEDJfxwMBIGAUDs6xc1oKM7EXDTI0MDMyNzAyNTUzMVowIgIR ANP0CcBiCkq8E2LXydjncYIXDTI0MDMyNzAzMTM1NlowIQIQUVhgCHFp6dwTL4JJ Is233xcNMjQwMzI3MDYzMzI0WjAiAhEAsCdu6Yu8JwoNs2u4v9iLiBcNMjQwMzI3 MDYzNzUwWjAhAhA0dmS3mc4YAxHhHMFUQH9hFw0yNDAzMjcwNjM3NTJaMCICEQDs 9CatrNm3LBFRtKo7d5DvFw0yNDAzMjcwODI2MjRaMCECEGArEwyWav4eEwGA24Az t18XDTI0MDMyNzA5MDkxM1owIgIRAKNJcATe0v3+EU6LBlvxwI4XDTI0MDMyNzA5 MjcxOFowIgIRAMlclt6PJiWADmbgMIcsW2gXDTI0MDMyNzA5MjcyOVowIQIQenA9 NG4F11gNFOPAM9j41xcNMjQwMzI3MTExMTM4WjAhAhA61QmpvKIHYQ0UBvORG95Q Fw0yNDAzMjcxMTI3MzZaMCECEBaZNntTAswWEcn18aJrNukXDTI0MDMyNzExMjcz OVowIgIRAL8kl/D7BoKkDuuqM/cmKZMXDTI0MDMyNzExMzUyMlowIgIRALT4IJZb iF2VDqadw1alWBoXDTI0MDMyNzExNTAzNVowIgIRAOfq+fp89GlCE9W2aXkKYIkX DTI0MDMyNzE1MTYzNFowIgIRAMDqw5MEicSoDQVhUj27UkUXDTI0MDMyNzE1Mjcx NVowIQIQQQQDA8k9V9AT7YkanoHAthcNMjQwMzI3MTUyNzMwWjAiAhEAkuwnMwWa jFkOrQjXEfbt/hcNMjQwMzI3MTUzNTMxWjAhAhAhPBGvvJEbIBMGVo9gWofoFw0y NDAzMjcxNzE0MzRaMCICEQDmPEJkZkTnZA0ORJwHgjNVFw0yNDAzMjcxNzE4MTFa MCICEQD4stZZ9tHNhA0Zgd0631bXFw0yNDAzMjcxNzM3MzVaMCECEE1BAKIM22H9 DXs6m1QClyoXDTI0MDMyNzE4MDE1MFowIQIQFCoCXFIFfV0NQ+J+OyNAABcNMjQw MzI3MjEzOTMzWjAhAhAFZTtWzqhM+w1+73acXlNjFw0yNDAzMjcyMTQ2MTRaMCEC EDvgVXja+Ev6E0MoUFyRNE4XDTI0MDMyNzIyMDkyNFowIQIQF3qthAT4Y5ENq9j3 yxqh+RcNMjQwMzI3MjIyODM0WjAhAhB74eaN+DDgnw1RhpiectO6Fw0yNDAzMjgw MDA4NTZaMCICEQDZN/n54NXFzQ3+IOgfmQI5Fw0yNDAzMjgwMDM1MTRaMCECEBhi 4iLkJMZoDtRQPbXvFBAXDTI0MDMyODAwNDYyNlowIQIQSw/0b0JgdYwNQOvotWfA NhcNMjQwMzI4MDE0NjU1WjAhAhBPc5479uCC9g4q9nnCMyb2Fw0yNDAzMjgwMjAz MDdaMCECEFxg4qTW7PmaE7Nx4PtNuloXDTI0MDMyODAyMDMwN1owIQIQJTzcxLyl igwN5jRJ7J843hcNMjQwMzI4MDQwNTA0WjAiAhEAgkPwnERLhm8RCD144vaGBBcN MjQwMzI4MDQwNTA1WjAhAhA6tGmn4Lry2Q1yzHj3cKeTFw0yNDAzMjgwNDA1MDVa MCECEAcFtu4LY4ziESVo8xVoAzUXDTI0MDMyODA0MDUwNFowIgIRAKenA98LGlP0 EWHExaajZHkXDTI0MDMyODA0MDUwNFowIgIRAN/RszKimUAsDVpcU3g7POcXDTI0 MDMyODA0MTgzMVowIQIQQgYZj6ivV50TbjwTT/vpNhcNMjQwMzI4MDQxODMxWjAi AhEAp8mEnR9IvcUOKP/3tdQ3RxcNMjQwMzI4MDQxODMxWjAiAhEA3q+sgbeAzr4R YNTUQCZCBBcNMjQwMTA0MDEwMDMzWjAhAhBK6dMRRpKZKhORkv974ZYPFw0yNDAx MDUwMTAwNDlaMCECEDkoxV/yl6d1E4/XHmMhoq0XDTI0MDEwODAxMDA1N1owIgIR ANNRs/MubnHZEVHWXka5AVEXDTI0MDExMTAxMDA0NVowIQIQUuQv1D/4HbITJ9yy hmRxCRcNMjQwMTE4MTQxNzA5WjAiAhEAzLFuzvg4BBYNmmMGyLZ4wxcNMjQwMTE3 MTcyMzE5WjAhAhBdMxjwF87BKg4ENrTZGSvIFw0yNDAxMTkxOTA1NDZaMCECEB6H ZZJjQ4SeEUOgDPgh+p0XDTI0MDEyMTAxMDExOVowIgIRAKktpzqrhyWuDUZLSPVU CGAXDTI0MDEyMjAxMDA1MlowIgIRAN3KnGSTXUaEDRL7fcQIAZgXDTI0MDMyNDAx MDAzMFowIQIQWMU+p72MMOENZOYIr41VVBcNMjQwMTIzMDkyODEyWjAiAhEA5cdM NF3GUwoRa+Vad1kWcRcNMjQwMTI1MDEwMTE1WjAiAhEAoVxCnbPDTuYNhLf3tTOh tRcNMjQwMTI2MDEwMTA4WjAiAhEA1zSs3ydY8b0NPJ1wdYvjfhcNMjQwMTI0MDcz NjQ4WjAiAhEArtotmjXUgtEOcHK8JxCafRcNMjQwMTI0MDczNjUzWjAhAhAmkFsQ 1S8UHxPYZ4opttcwFw0yNDAxMjkwMTAwNTlaMCECEDjvTLK2CZDwEX5LqOOJdjMX DTI0MDEzMTAxMDEwMVowIgIRAIGyRiu3ElgxE4Q2tF0tNAwXDTI0MDIwNzAxMDEw OFowIQIQZr4DVlwWPqANaB2jT00pNxcNMjQwMzA3MDEwMDIyWjAhAhAzW2kKmgtz ixNSaJZsplh+Fw0yNDAyMTQwMTAwMzJaMCICEQCwe3tGE54YSA1nNpk8JF4rFw0y NDAyMTgwMTAwNTRaMCICEQD8aZ5+D4w09Q5xd4vziF95Fw0yNDAyMTkxNTEzNDRa MCECEFGxJZnMikCeEVs2w9xzfPAXDTI0MDIyMjAxMDEyMFowIQIQTMMrvJGGXOIR NHtX8setxxcNMjQwMjIyMDEwMTA1WjAhAhA3BryMLONMihOEnzf8A62wFw0yNDAy MjgwMTAwMzZaMCICEQC5mMjq4Fu5ZRNLr51o0ygJFw0yNDAyMjkwMTAwMzBaMCEC EHXawjWASUrtEXeIx0Z9dRYXDTI0MDMwMzAxMDAyN1owIgIRAIga5R6FZ5M5Dnpz q9gF10YXDTI0MDMwMjA3NTgyN1owIQIQIKe4MyRNsoUTmWWae8+xSxcNMjQwMzEx MDEwMDQ3WjAhAhA+hYoCDPvGWA4hCQUx97w6Fw0yNDAzMjQwMTAxMjFaMCICEQDb lrd19ZyaDBOgieeFgnYhFw0yNDAzMjUwMTAwNDdaMCICEQDW0GgZCG9S3w35DFvo SIRRFw0yNDAzMjYwMTAwMzZaMCECED7h3awFJiO+E6h/v7QSSZkXDTI0MDMyNzAx MDEyOVqgcjBwMB8GA1UdIwQYMBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MAsGA1Ud FAQEAgISyTBABgNVHRwBAf8ENjA0oC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cv Z3RzMXA1L3Y1VlRfNjRKaXpNLmNybIEB/zANBgkqhkiG9w0BAQsFAAOCAQEAeGkC WzZNjMkDYEsmzGtErodzsn5UP8Kk7t/Phq5ml9MsEEj9i3OWRBsM2qnXtTg6MUu4 gM0I49CHsbBrJUg/IUYh7RD4zITmovasECVxGTYNeNXXXXnux5PEWdGup+LBLFXh +cYX+0NRwBh3qDq5nTRI+W5PDerT+JAqLRQnCPJsOexGFimZ0ooi4IWFdYYigsSx CCbFJzQPsyrkRlmInITJXd0w+sgKNaIzF2XCpWSSnArZg34bNohYD2IKpXWPWEfG AS1JIQB/AaO9l+NuMNLD7P2jEPThFmqdpS4m/xnuirIDKz8lr+9DL1qI47J7KCAA jQHALVRUvVMV3sFXpQ== —–END X509 CRL—–

Certificate Revocation List (CRL): のセクションはバージョンや発行者の情報が記載されている。

Revoked Certificates: のセクションがシリアル番号と失効日の対応として出力されているようだ。

補足: CRLの失効申請について

例えば、証明書の秘密鍵の漏洩が発生した場合については失効申請をする必要がある。 また、証明書の署名に利用されているアルゴリズムが非推奨で更新する場合も同様と思われる。

この場合は、発行した認証局に申請する必要があるがグローバルサインであれば下記のページを参考に実施する必要がある。

https://jp.globalsign.com/support/cert-management/expired.html

参考

参考にした動画

おわりに

CRLを実際に自分の目で見ることはほとんどないが、確認してみると意識していない部分に色々な技術や仕組みがあることがわかった。
CRLは定期的に更新されているリストでありリアルタイムに確認できるわけではないので、リアルタイムに確認できるOCSPというプロトコルもある。
次の機会ではOCSPも勉強してみる。