Confirmed users, Administrators
5,526
edits
CA/Revocation Reasons: Difference between revisions
Jump to navigation
Jump to search
m
Added further clarifications
m (cleaning up the new section) |
m (Added further clarifications) |
||
| Line 102: | Line 102: | ||
#* Unless the CA receives evidence of private key compromise the CA must not revoke all instances of that key across all other subscribers | #* Unless the CA receives evidence of private key compromise the CA must not revoke all instances of that key across all other subscribers | ||
# The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later sends another revocation request which does demonstrate possession of the private key. | # The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later sends another revocation request which does demonstrate possession of the private key. | ||
#* | #* After receiving the revocation request with demonstrated possession of the private key, the CA must revoke all instances of that key across all subscribers | ||
# The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later the CA receives evidence of private key compromise. | # The certificate subscriber previously requested revocation without demonstrating possession of the private key, and later the CA receives evidence of private key compromise. | ||
#* | #* After receiving verifiable evidence of private key compromise, the CA must revoke all instances of that key across all subscribers | ||
=== Possession of Private Key === | === Possession of Private Key === | ||