What is MIME type "application/pkix-crl"?

A MIME type is a string that tells browsers and other tools how to handle a particular kind of file.

The MIME type application/pkix-crl handles digital certificate revocation lists. It tells software that the file contains a list of revoked certificates. These lists help systems know which certificates are no longer trustworthy.

Files using this type, like those with the extension CRL, often come into play in security routines. They support digital signature and encryption procedures.

Used in secure communications to verify certificate status.
Prevents the use of compromised or invalid certificates.
Integrates with Public Key Infrastructure (PKI) setups.
Supports browser, email client, and network security functions.

Check out more details on Certificate Revocation Lists on Wikipedia for further reading.

Associated file extensions

.crl

Usage Examples

HTTP Header

When serving content with this MIME type, set the Content-Type header:


    Content-Type: application/pkix-crl

HTML

In HTML, you can specify the MIME type in various elements:


    <a href="file.dat" type="application/pkix-crl">Download file</a>

Server-side (Node.js)

Setting the Content-Type header in Node.js:


    const http = require('http');    
    
    http.createServer((req, res) => {    
      res.setHeader('Content-Type', 'application/pkix-crl');    
      res.end('Content here');    
    }).listen(3000);

Associated file extensions

.crl

FAQs

What is the purpose of the application/pkix-crl MIME type?

This MIME type identifies a Certificate Revocation List (CRL). It informs web browsers and operating systems that the file contains a list of digital certificates that have been revoked by a Certificate Authority (CA) before their scheduled expiration date, ensuring users do not trust compromised credentials.

How do I configure Apache to serve .crl files correctly?

To ensure Apache serves the correct MIME type for CRL files, add the following line to your .htaccess file or main configuration: AddType application/pkix-crl .crl. This prevents browsers from treating the file as generic text or binary data.

How do I set the MIME type for CRLs in Nginx?

In your Nginx configuration file (usually nginx.conf or inside a server block), ensure the types block includes the definition: types { application/pkix-crl crl; }. You may also need to reload Nginx for the changes to take effect.

Why is my browser downloading the .crl file instead of processing it?

If a server sends the file with a generic type like application/octet-stream or text/plain, the browser may just download it. Ensure your web server sends the application/pkix-crl header. Additionally, modern browsers often handle revocation checking internally via OCSP rather than downloading CRL files directly.

How can I view the contents of a file served as application/pkix-crl?

You can view the human-readable details of a CRL file using the OpenSSL command line tool: openssl crl -in yourfile.crl -text -noout. On Windows, double-clicking a valid .crl file usually opens the Certificate Manager to display the revocation list.

Is application/pkix-crl the same as application/x-pkcs7-crl?

No, they are different standards. application/pkix-crl is the standard MIME type for X.509 Certificate Revocation Lists defined in RFC 2585. The type application/x-pkcs7-crl is an older or proprietary variant sometimes used for PKCS#7 bundles, but modern implementations should prefer the standard PKIX type.

What happens if a system cannot download the CRL file?

This depends on the client's revocation checking policy. In a soft-fail scenario (common in browsers), the connection proceeds even if the CRL is unreachable. In a hard-fail scenario (high-security environments), the connection is terminated because the certificate's validity cannot be verified.

General FAQ

What is a MIME type?

A MIME (Multipurpose Internet Mail Extensions) type is a standard that indicates the nature and format of a document, file, or assortment of bytes. MIME types are defined and standardized in IETF's RFC 6838.

MIME types are important because they help browsers and servers understand how to process a file. When a browser receives a file from a server, it uses the MIME type to determine how to display or handle the content, whether it's an image to display, a PDF to open in a viewer, or a video to play.

MIME types consist of a type and a subtype, separated by a slash (e.g., text/html, image/jpeg, application/pdf). Some MIME types also include optional parameters.

How do I find the MIME type for a file?

You can check the file extension or use a file identification tool such as file --mime-type on the command line. Many programming languages also provide libraries to detect MIME types.

Why are multiple MIME types listed for one extension?

Different applications and historical conventions may use alternative MIME identifiers for the same kind of file. Showing them all helps ensure compatibility across systems.