Why would you configure an OCSP responder URL in an end-entity certificate?
A.
To designate the SCEP server to use for CRL updates for that certificate
B.
To identify the end point that a certificate has been assigned to
C.
To designate a server for certificate status checking
D.
To provide the CRL location for the certificate
The Answer Is:
C
This question includes an explanation.
Explanation:
An OCSP responder URL in an end-entity certificate is used to designate a server for certificate status checking. OCSP stands for Online Certificate Status Protocol, which is a method of verifying whether a certificate is valid or revoked in real time. An OCSP responder is a server that responds to OCSP requests from clients with the status of the certificate in question. The OCSP responder URL in an end-entity certificate points to the location of the OCSP responder that can provide the status of that certificate.