Step D. Revoke The Certificate; Step E. Check Master Ca's Crl For The Revoked Certificate - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Click Details.
4.
Scroll to down to the section that enables you to download the certificate to the
5.
browser, and download the certificate.

Step D. Revoke the Certificate

To revoke the certificate you issued:
Go to the end-entity interface for the Certificate Manager.
1.
Select the Revocation tab.
2.
In the left frame, click User Certificate.
3.
The User Certificate Revocation form appears.
In the Revocation Reason section, select Unspecified and click Submit.
4.
The browser shows the "Select a Certificate" dialog box and prompts you to
choose the certificate you want to revoke.
Select the certificate you downloaded and click OK.
5.
The clone Certificate Manager revokes the certificate, updates the certificate
status in its internal database, and sends details about the revoked certificate to
the master Certificate Manager.

Step E. Check Master CA's CRL for the Revoked Certificate

To verify that the revoked certificate has been included in the master Certificate
Manager's CRL:
Go to the master Certificate Manager's Agent Services interface.
1.
The URL is in this format:
In the left frame, click Update Certificate Revocation List.
2.
In the form that appears, select the algorithm that you want to use to sign the
3.
new CRL.
MD5 with RSA generates a 128-bit message digest. Most existing software
applications that handle certificates support only MD5. This is the default
algorithm.
SHA-1 with RSA generates a 160-bit message digest. Before choosing
SHA-1 with RSA, make sure your applications support it. Netscape
Navigator 3.0 (or later) and Enterprise Server 2.01 (or later) support SHA-1.
https://<hostname>:<agent_port>
Chapter 7 Installing and Uninstalling CMS Instances
Cloning a Certificate Manager
297