Confirmed users, Administrators
5,526
edits
CA/Revocation Reasons: Difference between revisions
Jump to navigation
Jump to search
Incorporating feedback
(Incorporating feedback) |
(Incorporating feedback) |
||
| Line 98: | Line 98: | ||
== Banned Revocation Reasons == | == Banned Revocation Reasons == | ||
The following | The CRL reasonCode extension MUST NOT contain any of the following reasons for TLS end-entity certificates. If revocation is for one of the following, then the reasonCode extension MUST NOT be provided for that entry in the CRL. | ||
* unspecified (RFC 5280 CRLReason #0) | * unspecified (RFC 5280 CRLReason #0) | ||
** Section 5.3.1 of RFC 5280 says: ''the reason code CRL entry extension SHOULD be absent instead of using the unspecified (0) reasonCode value'' | ** Section 5.3.1 of RFC 5280 says: ''the reason code CRL entry extension SHOULD be absent instead of using the unspecified (0) reasonCode value'' | ||