Updated today Sherlog

Certificate Revocation

com.apple.security.certificaterevocation

The payload that configures certificate revocation checking.

iOS 14.2+visionOS 1.1+

Configuration Keys (1)

Key	Type	Title	Description	Default	Range
`EnabledForCerts` An array of certificates that the system checks for revocation. Specifying a certificate authority (CA) enables revocation checking for all certificates chaining up to that CA. It's not necessary to specify trusted root certificates because they're implicitly specified. See [https://support.apple.com/en-us/HT209143](https://support.apple.com/en-us/HT209143) for the available trusted root certificates for Apple operating systems.	array	Enabled certs	An array of certificates that the system checks for revocation. Specifying a certificate authority (CA) enables revocation checking for all certificates chaining up to that CA. It's not necessary to specify trusted root certificates because they're implicitly specified. See [https://support.apple.com/en-us/HT209143](https://support.apple.com/en-us/HT209143) for the available trusted root certificates for Apple operating systems.	—	—
`SubjectPublicKeyInfoHashDict` A dictionary of hashed public keys.	dict	—	A dictionary of hashed public keys.	—	—
`Algorithm`required The algorithm must be `sha256`. Range: sha256	string	—	The algorithm must be `sha256`.	—
`Hash`required The hash of the DER-encoding of the certificate's `subjectPublicKeyInfo`. The hash field requires the data (`subjectPublicKeyInfo` hash) in a specific format: a Base64 encoded (binary) SHA-256 hash of the certificate's public key.	data	—	The hash of the DER-encoding of the certificate's `subjectPublicKeyInfo`. The hash field requires the data (`subjectPublicKeyInfo` hash) in a specific format: a Base64 encoded (binary) SHA-256 hash of the certificate's public key.	—	—