Check certificate validity !!!

[prem]

I have a Domain controller on which I have installed a
enterprice CA. I have another system on which I have w2k
prof. installed.
I wanted to develop a program ( that runs on w2k prof
mchine ) which can take the given certificate ( either by
serial no. or by PCERT_CONTEXT of that certificate ) and
check with the CA if it is revoked or not.
I tried to do using ICertAdmin::IsValidCertificate(), this
works only when the code runs on the DC but not on w2k
prof.
I also tried CertVerifyRevocation() and I constantly got
CRYPT_E_REVOCATION_OFFLINE error.
Can anyone suggest me a way to do it.

Thanks in advance.
-Prem

 

[Laudon Williams [MSFT]]

Do you want to check validity against the CA, or against the CRL. If it is
the CRL, try CAPICOM.