Determining trustworthiness of a cryptographic certificate

A computer system for determining whether a cryptographic certificate can be trusted, comprising:

• one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage media, and program instructions stored on at least one of the one or more computer-readable tangible storage media for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, wherein the computer system is capable of performing a method comprising:
• receiving a pre-checked cryptographic certificate from a client device, wherein the pre-check comprises a first check on a first set of attributes of the cryptographic certificate, wherein the client device transmits the trusted certificate to a second device that performs a second check;
• performing the second check on a second set of attributes of the pre-checked cryptographic certificate, wherein the second device stores the pre-checked cryptographic certificate in an attribute store, wherein the second check comprises,
• analyzing historical certificate information to determine correlations between the pre-checked cryptographic certificate and the historical certificate information,
• performing a statistical analysis using the historical certificate information, and
• comparing the pre-checked certificate with a plurality of information stored on a certificate revocation list (CRL);
• and
• determining that the pre-checked certificate passes the second check.

A computer program product for determining whether a cryptographic certificate can be trusted, comprising:

• one or more computer-readable tangible storage media and program instructions stored on at least one of the one or more computer-readable tangible storage media, the program instructions executable by a processor to cause the processor to perform a method comprising:
• receiving a pre-checked cryptographic certificate from a client device, wherein the pre-check comprises a first check on a first set of attributes of the cryptographic certificate, wherein the client device transmits the trusted certificate to a second device that performs a second check;
• performing the second check on a second set of attributes of the pre-checked cryptographic certificate, wherein the second device stores the pre-checked cryptographic certificate in an attribute store, wherein the second check comprises,
• analyzing historical certificate information to determine correlations between the pre-checked cryptographic certificate and the historical certificate information,
• performing a statistical analysis using the historical certificate information, and
• comparing the pre-checked certificate with a plurality of information stored on a certificate revocation list (CRL);
• and
• determining that the pre-checked certificate passes the second check.