A RevocationReason
indicates whether a Certificate
has been revoked, and the reason for revocation. These correspond to standard revocation reasons from RFC 5280. Note that the enum labels and values in this definition are not the same ASN.1 values defined in RFC 5280. These values will be translated to the correct ASN.1 values when a CRL is created.
Enums | |
---|---|
REVOCATION_REASON_UNSPECIFIED
|
Default unspecified value. This value does indicate that a Certificate
has been revoked, but that a reason has not been recorded. |
KEY_COMPROMISE
|
Key material for this Certificate
may have leaked. |
CERTIFICATE_AUTHORITY_COMPROMISE
|
The key material for a certificate authority in the issuing path may have leaked. |
AFFILIATION_CHANGED
|
The subject or other attributes in this Certificate
have changed. |
SUPERSEDED
|
This Certificate
has been superseded. |
CESSATION_OF_OPERATION
|
This Certificate
or entities in the issuing path have ceased to operate. |
CERTIFICATE_HOLD
|
This Certificate
should not be considered valid, it is expected that it may become valid in the future. |
PRIVILEGE_WITHDRAWN
|
This Certificate
no longer has permission to assert the listed attributes. |
ATTRIBUTE_AUTHORITY_COMPROMISE
|
The authority which determines appropriate attributes for a Certificate
may have been compromised. |