<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Certificate Revocation Monitoring

## OCSP Checking

```bash
openssl ocsp -issuer <issuer.pem> -cert <cert.pem> -url <url> [-resp_text]
```

### Response Status

| Status | Meaning |
|---|---|
| `good` | Not revoked |
| `revoked` | Certificate revoked |
| `unknown` | No information |

## CRL Inspection

```bash
openssl crl -in <crl> -inform DER -text -noout
openssl crl -in <crl> -inform DER -noout -lastupdate -nextupdate
```

## crt.sh API

```bash
curl -s "https://crt.sh/?q=<domain>&output=json"
```

## Agent Script

```bash
node agent.js ocsp example.com
node agent.js crl cert.pem
node agent.js ct-logs example.com
node agent.js monitor example.com
```
