CRL Update Failed - 证书吊销列表（CRL）更新失败 —— 无法从 CDP 下载刷新 CRL，吊销校验受影响

Go back Parent node: Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99 (1.3.6.1.4.1.59719.0.3)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.0.3.30`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) crl-update-failed(30) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm/CrlUpdateFailed`
WEID notation:	`weid:P-1A2V-0-3-U-0`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:00:03:1E`

Description

English:
Failed to update the Certificate Revocation List (CRL). The system cannot download and refresh the CRL from the CRL Distribution Point (CDP); certificate revocation status verification is affected and revoked certificates may not be identified.
Recommended severity: major. Recommended handling: verify the CRL Distribution Point (CDP) address, network connectivity, firewall and proxy rules; confirm that the Certification Authority (CA) has published a valid CRL; check the system time and error logs, and manually refresh the CRL after repair.
Status: registered but unused. Not yet emitted by any monitoring component; when implemented, carry the CDP address, the last successful update time and the age of the currently used CRL. The unused state shall be re-verified at each revision of this file.
Recommendation: define a maximum acceptable CRL age; when the CRL is beyond its nextUpdate time, treat the revocation checking result as unknown and apply the fail-closed or fail-open policy explicitly documented in the Certification Practice Statement (CPS).
See also: 1.3.6.1.4.1.59719.6.1.5, 1.3.6.1.4.1.59719.0.3.40, 1.3.6.1.4.1.59719.0.1.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书吊销列表（Certificate Revocation List，CRL）更新失败。系统无法从 CRL 分发点（CRL Distribution Point，CDP）下载并刷新 CRL，证书吊销状态校验功能受影响，存在无法识别已吊销证书的安全风险。
建议级别：重要。处理建议：核对 CRL 分发点地址、网络连通性、防火墙与代理规则；确认证书颁发机构（Certification Authority，CA）已发布有效 CRL；核查系统时间与故障日志，问题修复后手动刷新 CRL。
状态：已注册但未使用。尚无监控组件上报该告警；实现时应携带 CDP 地址、最近成功更新时间与当前所用 CRL 的陈旧时长。本文件每次修订时须重新核验该未使用状态。
建议：定义可接受的 CRL 最大陈旧时长；超过 nextUpdate 时间时应将吊销校验结果视为未知，并按认证业务声明（CPS）中明确记载的失败关闭或失败开放策略执行。
关联节点：1.3.6.1.4.1.59719.6.1.5、1.3.6.1.4.1.59719.0.3.40、1.3.6.1.4.1.59719.0.1.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC1C222591 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-59fef8e02e14	OIDplus Information Object Custom UUID (RFC 9562)
guid:1dacbc4f-1133-3939-b2b5-d5d73ce61dc9	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:deb49c4c-59f1-5631-aa36-372d3cc9ade1	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:12-D0-9C-22-25-91	OIDplus Information Object MAC address, Unicast (AAI)
mac:13-D0-9C-22-25-91	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-0-3-U-0	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=471999889	OIDplus Information Object X.500 DN