Integrated SSL Scanning
Page 3
Finjan proprietary and confidential
Figure 1: Certificate Validation Profile
The table below describes each option in the HTTPS certificate validation
profile:
2.2.1
Certificate Revoked (CRLs)
Field
Description
Unable to get certificate CRL
The CRL of a certificate could
not be found.
Unable to decrypt CRL's signature
This means that the actual
signature value could not be
determined rather than it not
matching the expected value.
CRL signature failure
The signature of the certificate
is invalid.
Certificate is not yet valid
The notBefore date is after the
current time.
Certificate has expired
The notAfter date is before the
current time.
Format error in CRL's lastUpdate field
The CRL lastUpdate field
contains an invalid time.
Format error in CRL's nextUpdate field
The CRL nextUpdate field
contains an invalid time.
Certificate revoked
The certificate has been
revoked.
