Missing step: certifícate revocation check during TLS handshake

dfritsch86

Browser typically check whether a certificate was revoked, either via CRL, OCSP or some vendor-specific alternatives