CRL Update Failed - 证书吊销列表（CRL）更新失败 —— 无法从 CDP 下载刷新 CRL，吊销校验受影响

Zurückkehren Übergeordnet: Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99 (1.3.6.1.4.1.59719.0.3)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.0.3.30`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) crl-update-failed(30) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm/CrlUpdateFailed`
WEID-Notation:	`weid:P-1A2V-0-3-U-0`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:00:03:1E`

Beschreibung

English:
Failed to update the Certificate Revocation List (CRL). The system cannot download and refresh the CRL from the CRL Distribution Point (CDP); certificate revocation status verification is affected and revoked certificates may not be identified.
Recommended severity: major. Recommended handling: verify the CRL Distribution Point (CDP) address, network connectivity, firewall and proxy rules; confirm that the Certification Authority (CA) has published a valid CRL; check the system time and error logs, and manually refresh the CRL after repair.
Status: registered but unused. Not yet emitted by any monitoring component; when implemented, carry the CDP address, the last successful update time and the age of the currently used CRL. The unused state shall be re-verified at each revision of this file.
Recommendation: define a maximum acceptable CRL age; when the CRL is beyond its nextUpdate time, treat the revocation checking result as unknown and apply the fail-closed or fail-open policy explicitly documented in the Certification Practice Statement (CPS).
See also: 1.3.6.1.4.1.59719.6.1.5, 1.3.6.1.4.1.59719.0.3.40, 1.3.6.1.4.1.59719.0.1.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书吊销列表（Certificate Revocation List，CRL）更新失败。系统无法从 CRL 分发点（CRL Distribution Point，CDP）下载并刷新 CRL，证书吊销状态校验功能受影响，存在无法识别已吊销证书的安全风险。
建议级别：重要。处理建议：核对 CRL 分发点地址、网络连通性、防火墙与代理规则；确认证书颁发机构（Certification Authority，CA）已发布有效 CRL；核查系统时间与故障日志，问题修复后手动刷新 CRL。
状态：已注册但未使用。尚无监控组件上报该告警；实现时应携带 CDP 地址、最近成功更新时间与当前所用 CRL 的陈旧时长。本文件每次修订时须重新核验该未使用状态。
建议：定义可接受的 CRL 最大陈旧时长；超过 nextUpdate 时间时应将吊销校验结果视为未知，并按认证业务声明（CPS）中明确记载的失败关闭或失败开放策略执行。
关联节点：1.3.6.1.4.1.59719.6.1.5、1.3.6.1.4.1.59719.0.3.40、1.3.6.1.4.1.59719.0.1.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
Keine Einträge vorhanden

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC1C222591 (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-59fef8e02e14	OIDplus Information Object Custom UUID (RFC 9562)
guid:1dacbc4f-1133-3939-b2b5-d5d73ce61dc9	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:deb49c4c-59f1-5631-aa36-372d3cc9ade1	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:12-D0-9C-22-25-91	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:13-D0-9C-22-25-91	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-0-3-U-0	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=471999889	OIDplus Information Object X.500 DN