Netscape MANAGEMENT SYSTEM 6.01 - CUSTOMIZATION Manual page 116

Approve Revocation Interface
Parameters Accepted by the Approve Revocation Interface (Continued)
Table 6-4
Parameter
csrRequestorComments
invalidityDate
op
requestId
revocationReason
revokeAll
serialNumber
116 Netscape Certificate Management System Customization Guide • May 2002
Format and Description
string
A comment field to provide more details about why the certificates are
being revoked.
number of seconds since 1 January 1970
The time when the certificates became invalid.
doRevoke
The only operation supported is doRevoke.
number
Specifies the enrollment request id corresponding to the certificate to
revoke. This allows you to post revocations to a Registration Authority.
0 - 6
The code for the reason the certificates are being revoked. The
revocation codes are:
• 0 - Reason not specified
• 1 - Key compromised
• 2 - CA key compromised
• 3 - Affiliation changes
• 4 - Certificate superseded
• 5 - Cessation of operation
• 6 - Certificate is on hold
QUERY_FILTER
For information on constructing a query filter, see Table 3-19 in the
section for "List Certificates Interface" on page 78.
To ensure accuracy when revoking certificates, you should use a query
filter that selects each certificate by its serial number.
An example value for revokeAll to revoke certificates with serial
numbers 10 and 14 is:
(|(certRecordId=10)(certRecordId=14))
number
Specifies the serial number of a certificate to revoke.