security protocol used by browsers and servers to verify real-time revocation status of digital certificates