Digital certificate is the key element that implements trust and trust authentication in e-government and e-commerce, however CA may be canceled and revoked in advance by accident in practical applications. Therefore it is critical for the users of this certificate to obtain the latest certificate status as soon as possible, it is also critical for realizing credibility in PKI system. It summarizes the advantages and disadvantages in PKI system, and discusses the difficulties in practical application by analyzing the OCSP protocol. Some corresponding methods are proposed to solve the above pro...