Gets or sets the client revocation data is fetched through when the document and these options hold none that applies: an OCSP
request to the responder a certificate's authority information access names (RFC 6960 Appendix A.1, HTTP POST), else the CRL at
its CRL distribution point (RFC 5280 §4.2.1.13). null (the default) fetches nothing.
public HttpClient? OnlineRevocationClient { get; set; }
RFC 6960 Appendix A; RFC 5280 §4.2.1.13 and §4.2.2.1. The addresses come from the certificates in the document, so opting in lets
a document make the client send requests to hosts it names (only http and https, at most 32 per validation). The
synchronous ValidateSignatures(PdfSignatureValidationOptions?) sends with , which the
browser does not support; use ValidateSignaturesAsync(PdfSignatureValidationOptions?, CancellationToken) there.