title: OCSP Revocation on client certificate
body: <p>How do I manually check for certificate revocation status in java using OCSP, given just a client's java.security.cert.X509Certificate?  I can't see a clear way to do it.</p>
  
  <p>Alternatively, can I make tomcat do it for me automatically, and how do you know your solution to be true?</p>