throw0101c 2 days ago

> §1.6.1 Definitions

> Short-lived Subscriber Certificate: For Certificates issued on or after 15 March 2024 and prior to 15 March 2026, a Subscriber Certificate with a Validity Period less than or equal to 10 days (864,000 seconds). For Certificates issued on or after 15 March 2026, a Subscriber Certificate with a Validity Period less than or equal to 7 days (604,800 seconds).

[…]

> §7.1.2.11.2 CRL Distribution Points

> The CRL Distribution Points extension MUST be present in: Subordinate CA Certificates; and Subscriber Certificates that 1) do not qualify as “Short-lived Subscriber Certificates” and 2) do not include an Authority Information Access extension with an id-ad-ocspaccessMethod.

* https://cabforum.org/working-groups/server/baseline-requirem...

OCSP does not seem to be mandated in the latest Base Requirements.