Certificate Revocation
com.apple.security.certificaterevocation
The payload that configures certificate revocation checking.
iOS 14.2+visionOS 1.1+
Apple schemaConfiguration Keys (1)
| Key | Type | Description | Default | Range |
|---|---|---|---|---|
EnabledForCertsarrayEnabled certs | array | An array of certificates that the system checks for revocation. Specifying a certificate authority (CA) enables revocation checking for all certificates chaining up to that CA. It's not necessary to specify trusted root certificates because they're implicitly specified. See [https://support.apple.com/en-us/HT209143](https://support.apple.com/en-us/HT209143) for the available trusted root certificates for Apple operating systems. | Default: — | Range: — |
| dict | A dictionary of hashed public keys. | Default: — | Range: — | |
Algorithmstringrequired | string | The algorithm must be `sha256`. | Default: — | Range: sha256 |
Hashdatarequired | data | The hash of the DER-encoding of the certificate's `subjectPublicKeyInfo`. The hash field requires the data (`subjectPublicKeyInfo` hash) in a specific format: a Base64 encoded (binary) SHA-256 hash of the certificate's public key. | Default: — | Range: — |