${CRL_PROPERTIES}
CRL properties
URL
Searchbase (LDAP only)
Attribute (LDAP only)
Ignore next CRL update Yes No
Download interval (minutes)
${LDAP_PROPERTIES}
LDAP properties
URL
Authentication type none simple
Authentication username
Authentication password
Searchbase
Filter
Attribute
${OCSP_PROPERTIES}
OCSP properties
URL
Subtype Common PKIRFC
Use cache Yes No
Cache timeout (seconds)
Check response signature Yes No
${XKMS_PROPERTIES}
XKMS properties
URL
Check response signature No Yes (requires configuration of signature certificate below)
Common Name ${relayXkmsDO.signerCertCN}