does my certificate have OCSP No Check Extension?

Question

Some certificates have OCSP some certificates Only CRL some certificates neither of all.

how can I see, if certificate have or does not have "OCSP No Check Extension " using bouncicastle ro javas classes?

thank you very much :-)

Answer 1

OCSP No Check is an unusual extension. It's typically only present in OCSP delegate certificates. That said, look for an extension with OID 1.3.6.1.5.5.7.48.1.5. That's noCheck.