A protocol for checking certificate revocation status in near real time from an authoritative responder.