Confirmed users, Administrators
5,526
edits
CA/Revocation Reasons: Difference between revisions
Jump to navigation
Jump to search
m
cleaning up the new section
(Added Scope of Revocation section) |
m (cleaning up the new section) |
||
| Line 98: | Line 98: | ||
#* The CA must revoke all instances of that key across all subscribers | #* The CA must revoke all instances of that key across all subscribers | ||
# The certificate subscriber requesting the revocation has not demonstrated possession of the private key, and the CA does not have evidence of private key compromise. | # The certificate subscriber requesting the revocation has not demonstrated possession of the private key, and the CA does not have evidence of private key compromise. | ||
#* The CA may revoke all certificates associated with that subscriber that contain that public key | #* The CA may revoke all certificates associated with that subscriber that contain that public key | ||
#* The CA may block issuance of future certificates with that key for that subscriber | #* The CA may block issuance of future certificates with that key for that subscriber | ||
#* Unless the CA receives evidence of private key compromise the CA must not revoke all instances of that key across all other subscribers | |||
# The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later sends another revocation request which does demonstrate possession of the private key. | # The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later sends another revocation request which does demonstrate possession of the private key. | ||
#* The CA must revoke all instances of that key across all subscribers | #* The CA must then revoke all instances of that key across all subscribers | ||
# The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later the CA receives evidence of private key compromise. | # The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later the CA receives evidence of private key compromise. | ||
#* The CA must revoke all instances of that key across all subscribers | #* The CA must then revoke all instances of that key across all subscribers | ||
=== Possession of Private Key === | === Possession of Private Key === | ||