hasOcspNoCheckExtension

hasOcspNoCheckExtension

Reports whether a certificate carries the id-pkix-ocsp-nocheck extension (RFC 6960 §4.2.2.2.1) — the CA's assertion that relying parties may trust this OCSP responder certificate for its lifetime without revocation checks. An extension whose value is not the NULL that §4.2.2.2.1 requires does not count.

function hasOcspNoCheckExtension(
	certificate: OcspCertificateSource,
): boolean

Parameters

• certificate: OcspCertificateSource