CA/Revocation Reasons: Difference between revisions

Jump to navigation Jump to search
Incorporating feedback
(Incorporating feedback)
(Incorporating feedback)
Line 29: Line 29:


* No reason provided or unspecified (RFC 5280 CRLReason #0)
* No reason provided or unspecified (RFC 5280 CRLReason #0)
** When the reason codes below do not apply to the revocation request, the certificate MUST be revoked with an unspecified reason.
** When the reason codes below do not apply to the revocation request, the subscriber MUST NOT provide a reason code other than "unspecified".
* keyCompromise (RFC 5280 CRLReason #1)
* keyCompromise (RFC 5280 CRLReason #1)
** The certificate subscriber MUST choose the "keyCompromise" revocation reason when they become aware of or have reason to believe that the private key of their certificate has been compromised, e.g. an unauthorized person has had access to the private key of their certificate.
** The certificate subscriber MUST choose the "keyCompromise" revocation reason when they become aware of or have reason to believe that the private key of their certificate has been compromised, e.g. an unauthorized person has had access to the private key of their certificate.
Confirmed users, Administrators
5,526

edits

Navigation menu