sertifikatstatus

Sertifikatstatus refers to the current state of a certificate within a certification framework. It indicates whether the certificate is usable for its intended purpose, or whether it has become invalid due to expiration, revocation, suspension, or other conditions. This concept applies to digital certificates used in public key infrastructures (PKI) as well as to physical or organizational certification records that require status tracking.

In digital PKI, status is dynamic and maintained by the issuing certificate authority (CA) and, where applicable, by revocation mechanisms. Common statuses include valid, expired, revoked, suspended, and unknown. A certificate is considered valid while the current time lies within its validity period and it has not been revoked. Revocation denotes that the CA has withdrawn trust in the certificate prior to its expiry, typically due to key compromise, policy violations, or administrative changes. Expiration occurs when the certificate's validity period ends. Suspension is a temporary invalidation used by some systems.

Status is typically checked through online mechanisms such as the Online Certificate Status Protocol (OCSP) or by downloading Certificate Revocation Lists (CRLs). Some systems support OCSP stapling or rely on certificate transparency logs and policy checks. The status of a certificate can influence whether a user agent, server, or application accepts a connection, validates a signature, or performs a trust decision.

Understanding sertifikatstatus is essential for security, compliance, and the reliable operation of secure communications, code signing, and document authentication. It intersects with related concepts like certificate lifecycles, PKI governance, CRLs, OCSP, and renewal processes.