How to verify the validity of an Entrust SSL Certificate?

  1. Using the Entrust Site Seal
  2. Checking the CRL automatically with your browser
  3. Checking the CRL manually

  1. Using the Entrust Site Seal
    Go to the Web site whose certificate validity you want to confirm. If this site displays the Entrust Site Seal, click on the Entrust Site Seal and the certificate validity information will be displayed.

    (top)

  2. Checking the CRL automatically with your browser
    Using Internet Explorer 5.x and later
    Internet Explorer 5.x and later browsers are capable of automatically checking for certificate revocation. This option is not active by default, but you can easily activate it using the following instructions.
    • In the "Tools" menu, select "Internet Options".
    • In the "Advanced" tab, go to the "Security" section and check "Check for server certificate revocation (requires restart)".
    Each time you access a site protected by an Entrust SSL Certificate, Internet Explorer will automatically check the validity of the certificate against the current CRL published by Entrust.

    Using Netscape
    Netscape does not allow automatic CRL checking. We recommend checking the CRL manually, using the procedure below.

    (top)

  3. Checking the CRL manually
    Step 1 - Locate and Obtain the Certificate Serial Number
    Using Internet Explorer 5.x and later
    1. Go to the Web site whose certificate validity you want to confirm.
    2. Double-click the closed lock icon on the status bar at the bottom of the browser window. The Certificate dialog box appears.
    3. Click the details tab. The Details tab contains two windows.
    4. Select Serial Number from the list in the top window of the Details tab. The certificate serial number is displayed in the bottom window of the Detail tab.
    Using Netscape 4.x and later
    1. Go to the Web site where you want to confirm the status of the certificate.
    2. Click the closed lock icon on the status bar at the bottom of the browser window. The Security Info window appears.
    3. Click the View certificate button. The "View A Certificate" window appears.
    4. The Serial Number is displayed.

    Step 2 - Verify the validity of the Certificate

    1. Open a new browser
    2. Go to the Certificate Registration Web site http://www.entrust.net/ssl-technical/revoked.htm
    3. Click on "Search the list of revoked Web certificates"
    4. After you reviewed the "Entrust SSL Web Server Certificate Relying Party Agreement", click on "Agree"
    5. Enter the Serial Number after you have removed any special characters, including Blank space. Some examples of special characters are: ! @ # $ % ^ & * ( ) { } [ ] - + = , \ | / ? : ;
    6. Click the submit button.
    The browser sends the serial number to Entrust to verify its validity. The browser goes to the validity information page and informs you if the certificate with the serial number that you submitted is valid or invalid.

    (top)