FHFA has requested that we add pki.fhfa.gov, dc081.fhfa.gov, and va081.fhfa.gov to the OCSP/CRL list as pki.fhfa.gov is used solely for CRL information. The CDP url is http://pki.fhfa.gov/CertEnroll/FHFA-Sub-CA(2).crl. Technically, dc081.fhfa.gov and va081.fhfa.gov are the actual CRL servers...pki.fhfa.gov is the CNAME that points to a load balancer which in turn balances the load to dc081.fhfa.gov and va081.fhfa.gov.
h-m-f-t
commented
2 years ago
FHFA has requested that we add pki.fhfa.gov, dc081.fhfa.gov, and va081.fhfa.gov to the OCSP/CRL list as pki.fhfa.gov is used solely for CRL information. The CDP url is http://pki.fhfa.gov/CertEnroll/FHFA-Sub-CA(2).crl. Technically, dc081.fhfa.gov and va081.fhfa.gov are the actual CRL servers...pki.fhfa.gov is the CNAME that points to a load balancer which in turn balances the load to dc081.fhfa.gov and va081.fhfa.gov.