My Oracle Support Banner

Cannot Access Certificate Revocation List at Certificate Authority Website (Doc ID 2684603.1)

Last updated on APRIL 13, 2023

Applies to:

Java SE JDK and JRE - Version 8 and later
Information in this document applies to any platform.


For some organizations it may be that users' laptops and desktops are not connected to the Internet most of the time, only an internal network.  Therefore, the Online Certificate Status Protocol (OCSP) for checking certificate revocations is turned off.  Instead, an internally stored Certificate Revocation List (CRL) is relied upon for checking if a certificate may have been revoked.  The way this is done is by adding these two lines to the file.




The local area network was re-connected to the Internet.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.