Realisation of personal identification depends on the web server used.
Detailed instructions how to configure ID-card support to IIS ja Apache web server can be found here:
- Configuring IIS web server to support ID-card
- Configuring Apache web server to support ID-card (will be published soon)
- Configuring NGINGX web server to support ID-card
One method to check the validity of certificates is by regularly downloading the revocation lists.
A more secure way than using the revocation lists is to verify the validity upon each transaction by using the OCSP service that provides the most updated information about the validity in real time.