Revoked certificate reason code does not display
Originally Published: 2004-06-10
Article Number
Applies To
Microsoft Windows 2000 Server SP4
Issue
The CRL Reason Code which appears in the published CRL using MS Windows is not the reason code which appears in the certificate. Reason code: "privilegeWithdrawn" shows up as "Unknown CRL Reason(9)".
RFC:
***
5.3.1 Reason Code
The reasonCode is a non-critical CRL entry extension that identifies the reason for the certificate revocation. CRL issuers are strongly encouraged to include meaningful reason codes in CRL entries. However, the reason code CRL entry extension SHOULD be absent instead of using the unspecified (0) reasonCode value.
id-ce-cRLReason OBJECT IDENTIFIER ::= { id-ce 21 }
-- reasonCode ::= { CRLReason }
CRLReason ::= ENUMERATED {
unspecified (0),
keyCompromise (1),
cACompromise (2),
affiliationChanged (3),
superseded (4),
cessationOfOperation (5),
certificateHold (6),
removeFromCRL (8),
privilegeWithdrawn (9),
aACompromise (10) }
***
Cause
Resolution
Related Articles
How do you add reason codes to the Certificate Revocation List (CRL) list on KCA? Number of Views Does KCA publish reason codes for revoked certificates? Number of Views Error: 'Error executing: ADDLDAP Reason: type argument must be a supported directory type' Number of Views Provide rules to log more granular challenge reason Number of Views Error "Reason: Invalid credential" when attempting to configure RSA Via Access Identity Source Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA-2026-10: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities RSA SecurID Desktop Token 5.0.3 for Windows Administrator's Guide RSA SecurID Software Token 4.2.1 for Mac OS X Administrator's Guide Authentication Manager Security Console and Operations Console Inaccessible After Certificate Update
Don't see what you're looking for?
