Schiessl Cloud PKI – CA certificates, revocation lists, OCSP

Public repository of the Schiessl Cloud certification authorities.

• /certs/ – CA certificates: .crt = DER (Windows: double-click to open and install; this is also the format the CA-issuer address in certificates delivers), .pem = the same certificate as PEM text (Linux, OpenSSL, Firefox, Acrobat import)
• /crl/ – revocation lists (.crl, DER)
• /ocsp/<CA name>/ – OCSP responders (not a page, for clients)

Install the root CA certificate as a trusted root and the issuing CA certificates (EC and RSA) as intermediate CAs. These files already carry the CRL and CA-issuer addresses of the root. The time-stamp CA issues time-stamp certificates only.