Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual page 84

Revocation Interface
Table 3-21 Parameters Accepted by the Revocation Interface (Continued)
Parameter
reasonCode
serialNumber
subject
templateName
templateType
84 Netscape Certificate Management System Customization Guide • March 2002
Format and Description
0-8
The reasonCode identifies the reason the certificate is being revoked. This
information will be recorded on the Certificate Revocation List. The
reasonCode is only valid for automatic revocation requests. Manual
revocation requests can use the csrRequestorComments parameter to tell
the processing agent why the certificate is being revoked.
The meaning of the reasonCode values are:
• 0 - Unspecified
• 1 - Key Compromised
• 2 - CA Compromise*
• 3 - Affiliation Changed
• 4 - Certificate Superseded
• 5 - Cessation of Operation
• 6 - Certificate Hold*
• 7 - (Reserved for future use)*
• 8 - Remove from CRL*
Values marked with an asterisk (*) are valid reasonCode parameters that
are not used in the default UserRevocation.html form. These values
should generally not be used for client self-revocation.
string
The serial number of the certificate to be revoked. This parameter is used for
manual revocation: either a serial number or a subject name is used to
identify the certificate to be revoked.
string
The subject distinguished name (DN) of the certificate to be revoked.
string
Filename relative to the template directory (web-apps/ee/ca,
web-apps/ee/ra, web-apps/agent/ca, web-apps/agent/kra, or
web-apps/agent/ra) of a file to use as the response template. This
template will be used for any response, overriding default template settings.
RevocationConfirmation
RevocationConfirmation is the only value currently supported. This
parameter is required.