CA Unreachable - 证书颁发机构（CA）不可达 —— 证书申请、续期与状态查询等生命周期操作被阻塞

Zurückkehren Übergeordnet: Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99 (1.3.6.1.4.1.59719.0.3)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.0.3.60`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) ca-unreachable(60) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm/CaUnreachable`
WEID-Notation:	`weid:P-1A2V-0-3-1O-4`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:00:03:3C`

Beschreibung

English:
The Certification Authority (CA) is unreachable. The system cannot connect to the CA service for certificate application, renewal or status query, so certificate lifecycle operations are blocked.
Recommended severity: major. Recommended handling: check the CA service address, network connectivity, firewall and proxy rules, and the running state of the CA service; verify Domain Name System (DNS) resolution and the validity of the CA certificate.
Status: registered but unused. Not yet emitted by any monitoring component; when implemented, carry the CA identifier, the operation being blocked (enrolment, renewal or status query) and the failure duration. The unused state shall be re-verified at each revision of this file.
Recommendation: monitor the CA reachability proactively rather than only on failure of an enrolment attempt, since a renewal window is usually short and a CA outage discovered only at renewal time may cause certificate expiry.
See also: 1.3.6.1.4.1.59719.0.3.10, 1.3.6.1.4.1.59719.6.1.1, 1.3.6.1.4.1.59719.5.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书颁发机构（Certification Authority，CA）不可达。系统无法连接 CA 服务完成证书申请、续期或状态查询，证书生命周期操作被阻塞。
建议级别：重要。处理建议：检查 CA 服务地址、网络连通性、防火墙与代理规则以及 CA 服务运行状态；核对域名系统（Domain Name System，DNS）解析与 CA 证书有效性。
状态：已注册但未使用。尚无监控组件上报该告警；实现时应携带 CA 标识、被阻塞的操作（注册、续期或状态查询）与失败持续时长。本文件每次修订时须重新核验该未使用状态。
建议：应主动探测 CA 可达性，而非仅在注册失败时才发现——续期窗口通常很短，等到续期时才发现 CA 中断可能导致证书过期。
关联节点：1.3.6.1.4.1.59719.0.3.10、1.3.6.1.4.1.59719.6.1.1、1.3.6.1.4.1.59719.5.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
Keine Einträge vorhanden

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC6D7ACCD5 (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-7ffdf9350fc9	OIDplus Information Object Custom UUID (RFC 9562)
guid:533bcd8b-25c3-3070-9d5d-564d1b691918	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:27e6ccff-c558-53f1-80ff-223dba0e0b18	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:02-D5-6D-7A-CC-D5	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:03-D5-6D-7A-CC-D5	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-0-3-1O-4	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1836764373	OIDplus Information Object X.500 DN