Just imagine you private key (= the identity card of your company in the internet) has been stolen (i.e. by a hacker or a Trojan). Because of this you give your trust center a call and ask them to disable your certificate.

Now you discover: no user examined whether your certificate is valid or not!

You don’t know if your own browser checks certificates for validity? For demonstration purposes we have we requested a certificate with the TrustCenter of the German Telekom and had it disabled.

Browsercheck: Does my Browser check the validity of a server certificate?

You also configured your browser in such a way that it does not accomplish this examination? 

Why doesn’t each browser do that automatically? Because the administration of certificate check lists (certificate revocation lists = CRL) is not practicable, costly and network intensive.

How to get  rid of this problem with your browser? Use SyTrust validation technologies SyTrust CertControl for your pki and client support ValidationWorks! for your workstations.