The problem of certificate validating in cross certification is analyzed . And put forward a new certificate validating mechanism based on the OCSP and NAT between diffendent region.

• 根据在线证书状态协议(OCSP)的要求以及使用穿越NAT技术,提出了一个不同信任域之间证书撤销信息的验证机制。