SetCRLFetcher sets the function to use to read from the http response body.

SetOCSPFetcher sets the function to use to read from the http response body.

SetRemoteFetcher sets the function to use to read from the http response body.

VerifyCertificate ensures that the certificate passed in hasn't expired and checks the CRL for the server.

VerifyCertificateError ensures that the certificate passed in hasn't expired and checks the CRL for the server.

CRLSet associates a PKIX certificate list with the URL the CRL is fetched from.

HardFail determines whether the failure to check the revocation status of a certificate (i.e.

HTTPClient is an instance of http.Client that will be used for all HTTP requests.