https://live.paloaltonetworks.com/t5/next-generation-firewall/are-there-any-cases-where-certificates-are-marked-as-unknown/m-p/1220093#M5528 <P>Hello everyone,</P> <P>&nbsp;</P> <P>From the following knowledge, I understand that in CRLs with IDP Extension, certificates not listed in the CRL are marked as UNKNOWN.</P> <P>&nbsp;</P> <P>PAN-OS Behaviour for CRLs with IDP Extension: Certificate marked Unknown" if not listed in the CRL"<BR /><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldJCAS" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldJCAS</A></P> <P>&nbsp;</P> <P>Are there cases where the certificate status is UNKNOWN even if the CRL does not use the IDP Extension?<BR />If there are, I would appreciate it if you could tell me what cases apply.</P> Wed, 12 Feb 2025 01:42:13 GMT Y.Tsushima 2025-02-12T01:42:13Z https://live.paloaltonetworks.com/t5/next-generation-firewall/are-there-any-cases-where-certificates-are-marked-as-unknown/m-p/1220093#M5528 <P>Hello everyone,</P> <P>&nbsp;</P> <P>From the following knowledge, I understand that in CRLs with IDP Extension, certificates not listed in the CRL are marked as UNKNOWN.</P> <P>&nbsp;</P> <P>PAN-OS Behaviour for CRLs with IDP Extension: Certificate marked Unknown" if not listed in the CRL"<BR /><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldJCAS" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldJCAS</A></P> <P>&nbsp;</P> <P>Are there cases where the certificate status is UNKNOWN even if the CRL does not use the IDP Extension?<BR />If there are, I would appreciate it if you could tell me what cases apply.</P> Wed, 12 Feb 2025 01:42:13 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/are-there-any-cases-where-certificates-are-marked-as-unknown/m-p/1220093#M5528 Y.Tsushima 2025-02-12T01:42:13Z