Fixes #24

readium · Aug 27, 2019 · 4b5e0ce · 4b5e0ce
1 parent c2a39a7
commit 4b5e0ce
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/_pages/lcp-1-0-4.md b/_pages/lcp-1-0-4.md
@@ -827,11 +827,13 @@ With this signature and the certificate, a valid license will be created as e.g.
 
 #### **5.5.1. Validating the certificate**
 
-1. The Reading System <b class="rfc">must</b> check that the Certificate was not expired when the License Document was last updated.
+1. The Reading System <b class="rfc">must</b> check the signature of the Provider Certificate using the Root Certificate it embeds.
 
-2. It <b class="rfc">must</b> validate the presence of the Provider Certificate in the root chain. To do so, it <b class="rfc">must</b> check the signature of the Provider Certificate using the public key of the Root Certificate.
+2. If a network connection is available, it <b class="rfc">must</b> periodically update its Certificate Revocation List, as defined in [[X509](#normative-references)].
 
-3. It <b class="rfc">must</b> validate that the certificate was not revoked as defined in [[X509](#normative-references)]. If a network connection is available, it <b class="rfc">must</b> update its certificate revocation list before it checks the validity of the certificate.
+3. It <b class="rfc">must</b> check that the Certificate was not revoked, as defined in [[X509](#normative-references)]. 
+
+4. It <b class="rfc">must</b> check that the  Certificate was not expired when the License Document was last updated.
 
 #### **5.5.2. Validating the signature**