System and method for electronic certificate revocation

摘要

A system and method of verifying whether a certificate has been revoked by providing a DNS responder containing a certificate revocation list (CRL), parsing the CRL into DNS zones, and distributing this information to the respective primary DNS responders based upon DNS zones. Information about a specific certificate is gathered by querying a DNS responder for certificate validation information, receiving such information, and reporting the results of the queries to a client software application so that the user of the system can be informed as to whether the certificate has been revoked or not.