Can Certificate Revocation Lists be viewed directly?

Help
1

For educational purposes I was reading this page:

I am curious about what the CRL's actually look like but https://r3.c.lencr.org/ and https://e1.c.lencr.org/ both go to a 403 with a "AccessDenied" XML

is there a specific URL and is this documented anywhere?

or are they not available to the general public directly?

I'm aware of CRL search tools but I'm curious what the actual lists look like

1 Like
2

They're in sharded form, and we publish the shard list to the CCADB. You can get it from

curl https://ccadb.my.salesforce-sites.com/ccadb/AllCertificateRecordsCSVFormatv2 | grep c.lencr.org

(NOTE: loading this is slow, it's from Salesforce) (from Common CA Database by mozilla), but to help as of today and subject to change with notice only to the CCADB's DB:

 http://e1.c.lencr.org/1.crl
 http://e1.c.lencr.org/2.crl
 http://e1.c.lencr.org/3.crl
 http://e1.c.lencr.org/4.crl
 http://e1.c.lencr.org/5.crl
 http://e1.c.lencr.org/6.crl
 http://e1.c.lencr.org/7.crl
 http://e1.c.lencr.org/8.crl
 http://e1.c.lencr.org/9.crl
 http://e1.c.lencr.org/10.crl
 http://e1.c.lencr.org/11.crl
 http://e1.c.lencr.org/12.crl
 http://e1.c.lencr.org/13.crl
 http://e1.c.lencr.org/14.crl
 http://e1.c.lencr.org/15.crl
 http://e1.c.lencr.org/16.crl
 http://e1.c.lencr.org/17.crl
 http://e1.c.lencr.org/18.crl
 http://e1.c.lencr.org/19.crl
 http://e1.c.lencr.org/20.crl
 http://e1.c.lencr.org/21.crl
 http://e1.c.lencr.org/22.crl
 http://e1.c.lencr.org/23.crl
 http://e1.c.lencr.org/24.crl
 http://e1.c.lencr.org/25.crl
 http://e1.c.lencr.org/26.crl
 http://e1.c.lencr.org/27.crl
 http://e1.c.lencr.org/28.crl
 http://e1.c.lencr.org/29.crl
 http://e1.c.lencr.org/30.crl
 http://e1.c.lencr.org/31.crl
 http://e1.c.lencr.org/32.crl
 http://e1.c.lencr.org/33.crl
 http://e1.c.lencr.org/34.crl
 http://e1.c.lencr.org/35.crl
 http://e1.c.lencr.org/36.crl
 http://e1.c.lencr.org/37.crl
 http://e1.c.lencr.org/38.crl
 http://e1.c.lencr.org/39.crl
 http://e1.c.lencr.org/40.crl
 http://e1.c.lencr.org/41.crl
 http://e1.c.lencr.org/42.crl
 http://e1.c.lencr.org/43.crl
 http://e1.c.lencr.org/44.crl
 http://e1.c.lencr.org/45.crl
 http://e1.c.lencr.org/46.crl
 http://e1.c.lencr.org/47.crl
 http://e1.c.lencr.org/48.crl
 http://e1.c.lencr.org/49.crl
 http://e1.c.lencr.org/50.crl
 http://e1.c.lencr.org/51.crl
 http://e1.c.lencr.org/52.crl
 http://e1.c.lencr.org/53.crl
 http://e1.c.lencr.org/54.crl
 http://e1.c.lencr.org/55.crl
 http://e1.c.lencr.org/56.crl
 http://e1.c.lencr.org/57.crl
 http://e1.c.lencr.org/58.crl
 http://e1.c.lencr.org/59.crl
 http://e1.c.lencr.org/60.crl
 http://e1.c.lencr.org/61.crl
 http://e1.c.lencr.org/62.crl
 http://e1.c.lencr.org/63.crl
 http://e1.c.lencr.org/64.crl
 http://e1.c.lencr.org/65.crl
 http://e1.c.lencr.org/66.crl
 http://e1.c.lencr.org/67.crl
 http://e1.c.lencr.org/68.crl
 http://e1.c.lencr.org/69.crl
 http://e1.c.lencr.org/70.crl
 http://e1.c.lencr.org/71.crl
 http://e1.c.lencr.org/72.crl
 http://e1.c.lencr.org/73.crl
 http://e1.c.lencr.org/74.crl
 http://e1.c.lencr.org/75.crl
 http://e1.c.lencr.org/76.crl
 http://e1.c.lencr.org/77.crl
 http://e1.c.lencr.org/78.crl
 http://e1.c.lencr.org/79.crl
 http://e1.c.lencr.org/80.crl
 http://e1.c.lencr.org/81.crl
 http://e1.c.lencr.org/82.crl
 http://e1.c.lencr.org/83.crl
 http://e1.c.lencr.org/84.crl
 http://e1.c.lencr.org/85.crl
 http://e1.c.lencr.org/86.crl
 http://e1.c.lencr.org/87.crl
 http://e1.c.lencr.org/88.crl
 http://e1.c.lencr.org/89.crl
 http://e1.c.lencr.org/90.crl
 http://e1.c.lencr.org/91.crl
 http://e1.c.lencr.org/92.crl
 http://e1.c.lencr.org/93.crl
 http://e1.c.lencr.org/94.crl
 http://e1.c.lencr.org/95.crl
 http://e1.c.lencr.org/96.crl
 http://e1.c.lencr.org/97.crl
 http://e1.c.lencr.org/98.crl
 http://e1.c.lencr.org/99.crl
 http://e1.c.lencr.org/100.crl
 http://e1.c.lencr.org/101.crl
 http://e1.c.lencr.org/102.crl
 http://e1.c.lencr.org/103.crl
 http://e1.c.lencr.org/104.crl
 http://e1.c.lencr.org/105.crl
 http://e1.c.lencr.org/106.crl
 http://e1.c.lencr.org/107.crl
 http://e1.c.lencr.org/108.crl
 http://e1.c.lencr.org/109.crl
 http://e1.c.lencr.org/110.crl
 http://e1.c.lencr.org/111.crl
 http://e1.c.lencr.org/112.crl
 http://e1.c.lencr.org/113.crl
 http://e1.c.lencr.org/114.crl
 http://e1.c.lencr.org/115.crl
 http://e1.c.lencr.org/116.crl
 http://e1.c.lencr.org/117.crl
 http://e1.c.lencr.org/118.crl
 http://e1.c.lencr.org/119.crl
 http://e1.c.lencr.org/120.crl
 http://e1.c.lencr.org/121.crl
 http://e1.c.lencr.org/122.crl
 http://e1.c.lencr.org/123.crl
 http://e1.c.lencr.org/124.crl
 http://e1.c.lencr.org/125.crl
 http://e1.c.lencr.org/126.crl
 http://e1.c.lencr.org/127.crl
 http://e1.c.lencr.org/128.crl
 http://r3.c.lencr.org/1.crl
 http://r3.c.lencr.org/2.crl
 http://r3.c.lencr.org/3.crl
 http://r3.c.lencr.org/4.crl
 http://r3.c.lencr.org/5.crl
 http://r3.c.lencr.org/6.crl
 http://r3.c.lencr.org/7.crl
 http://r3.c.lencr.org/8.crl
 http://r3.c.lencr.org/9.crl
 http://r3.c.lencr.org/10.crl
 http://r3.c.lencr.org/11.crl
 http://r3.c.lencr.org/12.crl
 http://r3.c.lencr.org/13.crl
 http://r3.c.lencr.org/14.crl
 http://r3.c.lencr.org/15.crl
 http://r3.c.lencr.org/16.crl
 http://r3.c.lencr.org/17.crl
 http://r3.c.lencr.org/18.crl
 http://r3.c.lencr.org/19.crl
 http://r3.c.lencr.org/20.crl
 http://r3.c.lencr.org/21.crl
 http://r3.c.lencr.org/22.crl
 http://r3.c.lencr.org/23.crl
 http://r3.c.lencr.org/24.crl
 http://r3.c.lencr.org/25.crl
 http://r3.c.lencr.org/26.crl
 http://r3.c.lencr.org/27.crl
 http://r3.c.lencr.org/28.crl
 http://r3.c.lencr.org/29.crl
 http://r3.c.lencr.org/30.crl
 http://r3.c.lencr.org/31.crl
 http://r3.c.lencr.org/32.crl
 http://r3.c.lencr.org/33.crl
 http://r3.c.lencr.org/34.crl
 http://r3.c.lencr.org/35.crl
 http://r3.c.lencr.org/36.crl
 http://r3.c.lencr.org/37.crl
 http://r3.c.lencr.org/38.crl
 http://r3.c.lencr.org/39.crl
 http://r3.c.lencr.org/40.crl
 http://r3.c.lencr.org/41.crl
 http://r3.c.lencr.org/42.crl
 http://r3.c.lencr.org/43.crl
 http://r3.c.lencr.org/44.crl
 http://r3.c.lencr.org/45.crl
 http://r3.c.lencr.org/46.crl
 http://r3.c.lencr.org/47.crl
 http://r3.c.lencr.org/48.crl
 http://r3.c.lencr.org/49.crl
 http://r3.c.lencr.org/50.crl
 http://r3.c.lencr.org/51.crl
 http://r3.c.lencr.org/52.crl
 http://r3.c.lencr.org/53.crl
 http://r3.c.lencr.org/54.crl
 http://r3.c.lencr.org/55.crl
 http://r3.c.lencr.org/56.crl
 http://r3.c.lencr.org/57.crl
 http://r3.c.lencr.org/58.crl
 http://r3.c.lencr.org/59.crl
 http://r3.c.lencr.org/60.crl
 http://r3.c.lencr.org/61.crl
 http://r3.c.lencr.org/62.crl
 http://r3.c.lencr.org/63.crl
 http://r3.c.lencr.org/64.crl
 http://r3.c.lencr.org/65.crl
 http://r3.c.lencr.org/66.crl
 http://r3.c.lencr.org/67.crl
 http://r3.c.lencr.org/68.crl
 http://r3.c.lencr.org/69.crl
 http://r3.c.lencr.org/70.crl
 http://r3.c.lencr.org/71.crl
 http://r3.c.lencr.org/72.crl
 http://r3.c.lencr.org/73.crl
 http://r3.c.lencr.org/74.crl
 http://r3.c.lencr.org/75.crl
 http://r3.c.lencr.org/76.crl
 http://r3.c.lencr.org/77.crl
 http://r3.c.lencr.org/78.crl
 http://r3.c.lencr.org/79.crl
 http://r3.c.lencr.org/80.crl
 http://r3.c.lencr.org/81.crl
 http://r3.c.lencr.org/82.crl
 http://r3.c.lencr.org/83.crl
 http://r3.c.lencr.org/84.crl
 http://r3.c.lencr.org/85.crl
 http://r3.c.lencr.org/86.crl
 http://r3.c.lencr.org/87.crl
 http://r3.c.lencr.org/88.crl
 http://r3.c.lencr.org/89.crl
 http://r3.c.lencr.org/90.crl
 http://r3.c.lencr.org/91.crl
 http://r3.c.lencr.org/92.crl
 http://r3.c.lencr.org/93.crl
 http://r3.c.lencr.org/94.crl
 http://r3.c.lencr.org/95.crl
 http://r3.c.lencr.org/96.crl
 http://r3.c.lencr.org/97.crl
 http://r3.c.lencr.org/98.crl
 http://r3.c.lencr.org/99.crl
 http://r3.c.lencr.org/100.crl
 http://r3.c.lencr.org/101.crl
 http://r3.c.lencr.org/102.crl
 http://r3.c.lencr.org/103.crl
 http://r3.c.lencr.org/104.crl
 http://r3.c.lencr.org/105.crl
 http://r3.c.lencr.org/106.crl
 http://r3.c.lencr.org/107.crl
 http://r3.c.lencr.org/108.crl
 http://r3.c.lencr.org/109.crl
 http://r3.c.lencr.org/110.crl
 http://r3.c.lencr.org/111.crl
 http://r3.c.lencr.org/112.crl
 http://r3.c.lencr.org/113.crl
 http://r3.c.lencr.org/114.crl
 http://r3.c.lencr.org/115.crl
 http://r3.c.lencr.org/116.crl
 http://r3.c.lencr.org/117.crl
 http://r3.c.lencr.org/118.crl
 http://r3.c.lencr.org/119.crl
 http://r3.c.lencr.org/120.crl
 http://r3.c.lencr.org/121.crl
 http://r3.c.lencr.org/122.crl
 http://r3.c.lencr.org/123.crl
 http://r3.c.lencr.org/124.crl
 http://r3.c.lencr.org/125.crl
 http://r3.c.lencr.org/126.crl
 http://r3.c.lencr.org/127.crl
 http://r3.c.lencr.org/128.crl

edit: Don't hyperlink to Salesforce, just put a curl command

8 Likes
3

I appreciate that

I downloaded one of the E1 files and looked up a few of the serial numbers and they were all for radiantlock.org subdomains. This seems to be some kind of internal Letsencrypt testing thing, is that correct?

since processing all these files would be a lot more work than I thought... has anyone ever pulled data on what the most common revocation reasons are?

3 Likes
4

Yes, that’s correct.

Although we could break down revocation reason code stats, I’m not sure they would be informative: most clients do not specify a reason, even though we encourage it.

6 Likes
5

It's meant as a reference to the logo. :slight_smile:

4 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.