Skip to content

Commit

Permalink
Clarify when CAs can halt CRL issuance
Browse files Browse the repository at this point in the history
  • Loading branch information
XolphinMartijn authored Nov 29, 2024
1 parent aa73544 commit 7f6ebf9
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions docs/BR.md
Original file line number Diff line number Diff line change
Expand Up @@ -1478,10 +1478,9 @@ CAs issuing CA Certificates:
1. MUST update and publish a new CRL at least every twelve (12) months;
2. MUST update and publish a new CRL within twenty-four (24) hours after recording a Certificate as revoked.

CAs MUST continue issuing CRLs until one of the following is true:
- all Subordinate CA Certificates containing the same Subject Public Key are expired or revoked; OR
- the corresponding Subordinate CA Private Key is destroyed.

CA Certificates MUST continue issuing CRLs until one of the following is true:
- all certificates issued by the CA Certificate(s) are expired; or
- all certificates issued by the CA Certificate(s) are expired or revoked and the corresponding CA Certificate(s) Private Key is destroyed.

### 4.9.8 Maximum latency for CRLs (if applicable)

Expand Down

0 comments on commit 7f6ebf9

Please sign in to comment.