OCSP_BASIC_RESPONSE_ENTRY structure (wincrypt.h)

The OCSP_BASIC_RESPONSE_ENTRY structure contains the current certificate status for a single certificate. This structure populates the OCSP_BASIC_RESPONSE_INFO rgResponseEntry member.

Syntax

typedef struct _OCSP_BASIC_RESPONSE_ENTRY {
  OCSP_CERT_ID    CertId;
  DWORD           dwCertStatus;
  union {
    POCSP_BASIC_REVOKED_INFO pRevokedInfo;
  } DUMMYUNIONNAME;
  FILETIME        ThisUpdate;
  FILETIME        NextUpdate;
  DWORD           cExtension;
  PCERT_EXTENSION rgExtension;
} OCSP_BASIC_RESPONSE_ENTRY, *POCSP_BASIC_RESPONSE_ENTRY;

Members

CertId

An OCSP_CERT_ID structure that specifies the target certificate of the online certificate status protocol (OCSP) response.

dwCertStatus

A value that indicates the target certificate revocation status.

RFC 2560 defines the following possible values for certificate status.

Value Meaning
OCSP_BASIC_GOOD_CERT_STATUS
0
The certificate is not revoked.
OCSP_BASIC_REVOKED_CERT_STATUS
1
The certificate is revoked either permanently or temporarily.
OCSP_BASIC_UNKNOWN_CERT_STATUS
2
The responder has no information for the target certificate.

DUMMYUNIONNAME

DUMMYUNIONNAME.pRevokedInfo

A pointer to an OCSP_BASIC_REVOKED_INFO structure that specifies the reason the target certificate was revoked.

ThisUpdate

The date and time at which the response indicated by dwCertStatus is known to be correct.

NextUpdate

The date and time on or before which newer information will be available for the certificate status. A value of zero indicates that the certificate status never expires.

cExtension

The number of elements in the rgExtension array.

rgExtension

An array of pointers to CERT_EXTENSION structures, each of which contains additional information about the response.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header wincrypt.h

See also

CERT_EXTENSION

OCSP_BASIC_RESPONSE_INFO

OCSP_BASIC_REVOKED_INFO

OCSP_CERT_ID

RFC 2560 Online Certificate Status Protocol