For your certificate validation needs, OpenSSL is vastly superior. Made this meme to commemorate this fact. Why? OpenSSL is open source. OpenSSL can perform OCSP validation using certificate serial number