REVOCATION_INDETERMINATE_REASONS

REVOCATION_INDETERMINATE_REASONS

Granular reasons why revocation status could not be determined.

Returned in CertificateRevocationStatus's indeterminateReasons when status is 'indeterminate'. Grouped by category:

• Evidence not found: no_applicable_crl, no_applicable_ocsp
• Scope mismatch: distribution_point_mismatch, issuer_name_mismatch, reason_scope_mismatch, indirect_crl_scope_mismatch, reason_coverage_incomplete
• Signer trust: crl_signer_not_found, crl_signer_not_authorized, crl_signer_revoked, crl_signer_indeterminate, and OCSP equivalents
• Freshness: crl_expired, ocsp_response_expired, ocsp_next_update_missing
• Delta CRL: delta_crl_unusable when an authenticated, current delta CRL cannot settle the status, delta_crl_retry_limit_exceeded when delta CRL candidates remain after the attempt limit. Either one outranks a good verdict from other evidence.
• Reason code: crl_reason_code_unrecognized and ocsp_reason_code_unrecognized when evidence revokes the certificate with an unrecognized CRLReason under unrecognizedReasonCode: 'reject'. Either one outranks a good verdict from other evidence.

const REVOCATION_INDETERMINATE_REASONS: "no_applicable_crl" | "no_applicable_ocsp" | "distribution_point_mismatch" | "issuer_name_mismatch" | "reason_scope_mismatch" | "indirect_crl_scope_mismatch" | "reason_coverage_incomplete" | "crl_signer_not_found" | "crl_signer_not_authorized" | "crl_signer_revoked" | "crl_signer_indeterminate" | "ocsp_responder_not_found" | "ocsp_responder_not_authorized" | "ocsp_responder_revoked" | "ocsp_responder_indeterminate" | "crl_expired" | "ocsp_response_expired" | "ocsp_next_update_missing" | "ocsp_status_unknown" | "delta_crl_unusable" | "delta_crl_retry_limit_exceeded" | "crl_reason_code_unrecognized" | "ocsp_reason_code_unrecognized"[]