Confirm, administrator
5,526
edits
Changes
Incorporating feedback
== Banned Revocation Reasons ==
The CRL reasonCode extension MUST NOT contain any of the following revocation reason codes are banned reasons for TLS end-entity certificates. Meaning that if If revocation is for one of the following, then the reasonCode extension MUST NOT be provided for that entry in the CRL.
* unspecified (RFC 5280 CRLReason #0)
** Section 5.3.1 of RFC 5280 says: ''the reason code CRL entry extension SHOULD be absent instead of using the unspecified (0) reasonCode value''
