| The reasonCode is a non-critical CRL entry extension that identifies
the reason for the certificate revocation. CAs are strongly
encouraged to include reason codes in CRL entries; however, the
reason code CRL entry extension should be absent instead of using the
unspecified (0) reasonCode value.
The ASN.1 syntax for this is:
id-ce-cRLReason OBJECT IDENTIFIER ::= { id-ce 21 }
-- reasonCode ::= { CRLReason }
CRLReason ::= ENUMERATED {
unspecified (0),
keyCompromise (1),
cACompromise (2),
affiliationChanged (3),
superseded (4),
cessationOfOperation (5),
certificateHold (6),
removeFromCRL (8),
privilegeWithdrawn (9),
aACompromise (10) }
author: Hemma Prafullchandra version: 1.7 See Also: Extension See Also: CertAttrSet |