Question

I want to validate the X509 certificate. And I thought to go for X509Certificate2.Verify() method.

However, the documentation does not tell anything about what all things it verifies.

  1. Please direct me to some documentation which provides details of this method.
  2. Does Verify() method verifies the certificate against revocation list? If yes, what if online list is not available or network is not available?
  3. Are there performance implications when you validate certificate against revocation list?
Was it helpful?

Solution

  1. Go through this question to understand Verify method more.
  2. Yes, Verify() method checks if the certificate using which it's called is revoked or not.
  3. There is no big performance hit but yes, it takes little longer time to verify if the certificate is revoked.
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top