CA Unreachable - 证书颁发机构（CA）不可达 —— 证书申请、续期与状态查询等生命周期操作被阻塞

Go back Parent node: Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99 (1.3.6.1.4.1.59719.0.3)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.0.3.60`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) ca-unreachable(60) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm/CaUnreachable`
WEID notation:	`weid:P-1A2V-0-3-1O-4`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:00:03:3C`

Description

English:
The Certification Authority (CA) is unreachable. The system cannot connect to the CA service for certificate application, renewal or status query, so certificate lifecycle operations are blocked.
Recommended severity: major. Recommended handling: check the CA service address, network connectivity, firewall and proxy rules, and the running state of the CA service; verify Domain Name System (DNS) resolution and the validity of the CA certificate.
Status: registered but unused. Not yet emitted by any monitoring component; when implemented, carry the CA identifier, the operation being blocked (enrolment, renewal or status query) and the failure duration. The unused state shall be re-verified at each revision of this file.
Recommendation: monitor the CA reachability proactively rather than only on failure of an enrolment attempt, since a renewal window is usually short and a CA outage discovered only at renewal time may cause certificate expiry.
See also: 1.3.6.1.4.1.59719.0.3.10, 1.3.6.1.4.1.59719.6.1.1, 1.3.6.1.4.1.59719.5.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书颁发机构（Certification Authority，CA）不可达。系统无法连接 CA 服务完成证书申请、续期或状态查询，证书生命周期操作被阻塞。
建议级别：重要。处理建议：检查 CA 服务地址、网络连通性、防火墙与代理规则以及 CA 服务运行状态；核对域名系统（Domain Name System，DNS）解析与 CA 证书有效性。
状态：已注册但未使用。尚无监控组件上报该告警；实现时应携带 CA 标识、被阻塞的操作（注册、续期或状态查询）与失败持续时长。本文件每次修订时须重新核验该未使用状态。
建议：应主动探测 CA 可达性，而非仅在注册失败时才发现——续期窗口通常很短，等到续期时才发现 CA 中断可能导致证书过期。
关联节点：1.3.6.1.4.1.59719.0.3.10、1.3.6.1.4.1.59719.6.1.1、1.3.6.1.4.1.59719.5.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC6D7ACCD5 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-7ffdf9350fc9	OIDplus Information Object Custom UUID (RFC 9562)
guid:533bcd8b-25c3-3070-9d5d-564d1b691918	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:27e6ccff-c558-53f1-80ff-223dba0e0b18	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:02-D5-6D-7A-CC-D5	OIDplus Information Object MAC address, Unicast (AAI)
mac:03-D5-6D-7A-CC-D5	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-0-3-1O-4	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1836764373	OIDplus Information Object X.500 DN