Edit

OCSP_BASIC_REVOKED_INFO structure (wincrypt.h)

  • Article

The OCSP_BASIC_REVOKED_INFO structure contains the reason a certificate was revoked. The OCSP_BASIC_RESPONSE_ENTRY structure uses this structure.

Syntax

typedef struct _OCSP_BASIC_REVOKED_INFO {
  FILETIME RevocationDate;
  DWORD    dwCrlReasonCode;
} OCSP_BASIC_REVOKED_INFO, *POCSP_BASIC_REVOKED_INFO;

Members

RevocationDate

Date that the certificate was revoked. For more information, see the RevocationDate member description for CRL_ENTRY.

dwCrlReasonCode

A value that specifies the reason a certificate was revoked. This can be one of the following values.

Value Meaning
CRL_REASON_UNSPECIFIED
0
 No reason was specified for revocation.
CRL_REASON_KEY_COMPROMISE
1
 It is known or suspected that the subject's private key or other aspects of the subject validated in the certificate are compromised.
CRL_REASON_CA_COMPROMISE
2
 It is known or suspected that the certification authority's (CA's) private key or other aspects of the CA validated in the certificate are compromised.
CRL_REASON_AFFILIATION_CHANGED
3
 The subject's name or other information in the certificate has been modified but there is no cause to suspect that the private key has been compromised.
CRL_REASON_SUPERSEDED
4
 The certificate has been superseded, but there is no cause to suspect that the private key has been compromised.
CRL_REASON_CESSATION_OF_OPERATION
5
 The certificate is no longer needed for the purpose for which it was issued, but there is no cause to suspect that the private key has been compromised.
CRL_REASON_CERTIFICATE_HOLD
6
 The certificate has been placed on hold.
CRL_REASON_REMOVE_FROM_CRL
8
 The certificate has been removed from the certificate revocation list (CRL).

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header wincrypt.h

See also

CRL_ENTRY

OCSP_BASIC_RESPONSE_ENTRY