Test certificates for the demo OCSP responder
Upload a test certificate to the demo.sk.ee/aia OCSP responder and choose which status it should return. Works with almost any X.509 certificate – test ID-card, Mobile-ID, Smart-ID or your own.
- Status must be Good to create signatures in the demo environment
- Expired certificates are always reported as revoked
- Any RFC 6960 OCSP client works — more about demo endpoints
Command line
Upload (status 5 = good, 6 = revoked, 1 = unknown):
curl -sS --data-urlencode sert@cert.pem \
-d status=5 \
https://demo.sk.ee/upload_cert/Check the status with OpenSSL:
openssl ocsp -issuer issuer.pem -cert cert.pem \
-url http://demo.sk.ee/aia -no_nonce -noverify -resp_text