Certificate Services Support

The Entrust IP addresses used revocation checks are dynamic and globally load balanced, because of this Entrust cannot provide a set of Static IP addresses.

Other Options:

1. White list the FQDN's listed below:

crl.entrust.net
crl2.entrust.net
ocsp.entrust.net

2. Proxy the CRL requests to a server in DMZ.

Request to crl.entrust.net would be directed to a proxy server which has internet access. Proxy server downloads the CRL.
Implementation details are dependent on the hardware/software available to execute this setup.

3. Host the CRL internally.

Manually download the CRL and host it on the internal server.
CRL would have to be re-downloaded periodically to keep an up to date view.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.