Confirmed users, Administrators
5,526
edits
CA/Revocation Reasons: Difference between revisions
Jump to navigation
Jump to search
m
added clarification
(re-drafted OCSP section) |
m (added clarification) |
||
| Line 114: | Line 114: | ||
* Expects CAs to follow the [https://cabforum.org/baseline-requirements-documents/ BRs] | * Expects CAs to follow the [https://cabforum.org/baseline-requirements-documents/ BRs] | ||
* Does not expect [https://www.mozilla.org/projects/security/certs/policy/ Mozilla Root Store Policy] section 6.1.1, "End-Entity TLS Certificate CRLRevocation Reasons", to also apply to OCSP responses | * Does not expect [https://www.mozilla.org/projects/security/certs/policy/ Mozilla Root Store Policy] section 6.1.1, "End-Entity TLS Certificate CRLRevocation Reasons", to also apply to OCSP responses | ||
* Does not expect | * Does not expect OCSP responses and CRLs to contain the same revocation reason code for each certificate | ||
* Does not do anything special for an OCSP response indicating certificateHold | * Does not do anything special for an OCSP response indicating certificateHold | ||