* affiliationChanged (RFC 5280 CRLReason #3)
** The certificate subscriber should choose the "affiliationChanged" revocation reason when their organization's name or other organizational information in the certificate has changed.
** This option does not need to be made available by CAs who only issue DV certificates that do not include any Subject Identity information.
* superseded (RFC 5280 CRLReason #4)
** The certificate subscriber should choose the "superseded" revocation reason when they request a new certificate to replace their existing certificate.