Cert Revoked - 证书已被吊销 —— 依据 CRL 或 OCSP 响应判定该证书处于已吊销状态

Go back Parent node: Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99 (1.3.6.1.4.1.59719.0.3)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.0.3.50`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) cert-revoked(50) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm/CertRevoked`
WEID notation:	`weid:P-1A2V-0-3-1E-5`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:00:03:32`

Description

English:
The certificate has been revoked by the Certification Authority (CA). According to the Certificate Revocation List (CRL) from the CRL Distribution Point (CDP) or the Online Certificate Status Protocol (OCSP) response, this certificate is in revoked status and authentication using it will be denied.
Recommended severity: critical. Recommended handling: stop using the revoked certificate, apply for a new certificate, confirm the revocation cause, and check CDP and OCSP availability; investigate whether a private key compromise occurred and start the incident process when compromise is suspected.
Status: registered but unused. Not yet emitted by any monitoring component; when implemented, carry the revocation reason code, the revocation time and the detection source (CRL or OCSP). The unused state shall be re-verified at each revision of this file.
Recommendation: distinguish revocation causes (key compromise, CA compromise, cessation of operation, superseded); a key compromise revocation shall trigger key rotation for all certificates sharing the same key.
See also: 1.3.6.1.4.1.59719.6.1.7, 1.3.6.1.4.1.59719.0.3.90, 1.3.6.1.4.1.59719.6.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书已由证书颁发机构（Certification Authority，CA）吊销。根据 CRL 分发点（CRL Distribution Point，CDP）的证书吊销列表（Certificate Revocation List，CRL）或在线证书状态协议（OCSP）响应，该证书处于吊销状态，使用该证书进行认证将被拒绝。
建议级别：紧急。处理建议：停用已吊销证书，重新申请证书，确认吊销原因，核查 CDP 与 OCSP 可用性；排查是否发生私钥泄露，疑似泄露时启动事件处置流程。
状态：已注册但未使用。尚无监控组件上报该告警；实现时应携带吊销原因码、吊销时间与检出来源（CRL 或 OCSP）。本文件每次修订时须重新核验该未使用状态。
建议：区分吊销原因（密钥泄露、CA 泄露、业务终止、证书替换）；因密钥泄露导致的吊销应触发共用同一密钥的所有证书的密钥轮换。
关联节点：1.3.6.1.4.1.59719.6.1.7、1.3.6.1.4.1.59719.0.3.90、1.3.6.1.4.1.59719.6.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC3A3A8E64 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-0edab0fdb46e	OIDplus Information Object Custom UUID (RFC 9562)
guid:1c9fba07-45f7-3b24-ab5a-bbb58b5f7921	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:25b06339-2c09-5690-bef6-91119e249da2	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:E2-49-3A-3A-8E-64	OIDplus Information Object MAC address, Unicast (AAI)
mac:E3-49-3A-3A-8E-64	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-0-3-1E-5	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=976916068	OIDplus Information Object X.500 DN