RevocationSource

RevocationSource

Identifies the source of revocation evidence.

Included in CertificateRevocationStatus's source when status is 'good' or 'revoked' to indicate which CRL or OCSP response provided the answer.

interface RevocationSource {
	readonly kind: "crl" | "ocsp";
	readonly signerCertificate?: ParsedCertificate;
	readonly evidenceIdentifier?: string;
	readonly thisUpdate?: Date;
}

Properties

• readonly kind: "crl" | "ocsp" — Whether evidence came from a CRL or OCSP response.
• readonly signerCertificate?: ParsedCertificate — Certificate that signed the evidence (CRL issuer or OCSP responder).
• readonly evidenceIdentifier?: string — Identifier for debugging (e.g., CRL issuer DN or OCSP responder URL).
• readonly thisUpdate?: Date — thisUpdate of the evidence backing the verdict — the OCSP single response entry or the freshest contributing CRL (an applied delta CRL supersedes its base). This is the timestamp 'best-available' compares.