Revocation States
There are two different states of revocation defined in RFC 3280:
- Revoked: A certificate is irreversibly revoked if, for example, it is discovered that the certificate authority (CA) had improperly issued a certificate, or if a private-key is thought to have been compromised. Certificates may also be revoked for failure of the identified entity to adhere to policy requirements such as publication of false documents, mis-representation of software behavior, or violation of any other policy specified by the CA operator or its customer. The most common reason for revocation is the user no longer being in sole possession of the private key (e.g., the token containing the private key has been lost or stolen).
- Hold: This reversible status can be used to note the temporary invalidity of the certificate (e.g., if the user is unsure if the private key has been lost). If, in this example, the private key was found and nobody had access to it, the status could be reinstated, and the certificate is valid again, thus removing the certificate from future CRLs.
Read more about this topic: Revocation List
Famous quotes containing the word states:
“In it he proves that all things are true and states how the truths of all contradictions may be reconciled physically, such as for example that white is black and black is white; that one can be and not be at the same time; that there can be hills without valleys; that nothingness is something and that everything, which is, is not. But take note that he proves all these unheard-of paradoxes without any fallacious or sophistical reasoning.”
—Savinien Cyrano De Bergerac (1619–1655)
Related Phrases
Related Words