Cert Revoked - 证书已被吊销 —— 依据 CRL 或 OCSP 响应判定该证书处于已吊销状态

Zurückkehren Übergeordnet: Certificate Alarm - 证书告警子树 —— 到期预警 10-19、已过期 20-29、吊销校验异常 30-59、CA 与信任链异常 60-99 (1.3.6.1.4.1.59719.0.3)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.0.3.50`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) certificate-alarm(3) cert-revoked(50) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/CertificateAlarm/CertRevoked`
WEID-Notation:	`weid:P-1A2V-0-3-1E-5`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:00:03:32`

Beschreibung

English:
The certificate has been revoked by the Certification Authority (CA). According to the Certificate Revocation List (CRL) from the CRL Distribution Point (CDP) or the Online Certificate Status Protocol (OCSP) response, this certificate is in revoked status and authentication using it will be denied.
Recommended severity: critical. Recommended handling: stop using the revoked certificate, apply for a new certificate, confirm the revocation cause, and check CDP and OCSP availability; investigate whether a private key compromise occurred and start the incident process when compromise is suspected.
Status: registered but unused. Not yet emitted by any monitoring component; when implemented, carry the revocation reason code, the revocation time and the detection source (CRL or OCSP). The unused state shall be re-verified at each revision of this file.
Recommendation: distinguish revocation causes (key compromise, CA compromise, cessation of operation, superseded); a key compromise revocation shall trigger key rotation for all certificates sharing the same key.
See also: 1.3.6.1.4.1.59719.6.1.7, 1.3.6.1.4.1.59719.0.3.90, 1.3.6.1.4.1.59719.6.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
证书已由证书颁发机构（Certification Authority，CA）吊销。根据 CRL 分发点（CRL Distribution Point，CDP）的证书吊销列表（Certificate Revocation List，CRL）或在线证书状态协议（OCSP）响应，该证书处于吊销状态，使用该证书进行认证将被拒绝。
建议级别：紧急。处理建议：停用已吊销证书，重新申请证书，确认吊销原因，核查 CDP 与 OCSP 可用性；排查是否发生私钥泄露，疑似泄露时启动事件处置流程。
状态：已注册但未使用。尚无监控组件上报该告警；实现时应携带吊销原因码、吊销时间与检出来源（CRL 或 OCSP）。本文件每次修订时须重新核验该未使用状态。
建议：区分吊销原因（密钥泄露、CA 泄露、业务终止、证书替换）；因密钥泄露导致的吊销应触发共用同一密钥的所有证书的密钥轮换。
关联节点：1.3.6.1.4.1.59719.6.1.7、1.3.6.1.4.1.59719.0.3.90、1.3.6.1.4.1.59719.6.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
Keine Einträge vorhanden

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC3A3A8E64 (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-0edab0fdb46e	OIDplus Information Object Custom UUID (RFC 9562)
guid:1c9fba07-45f7-3b24-ab5a-bbb58b5f7921	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:25b06339-2c09-5690-bef6-91119e249da2	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:E2-49-3A-3A-8E-64	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:E3-49-3A-3A-8E-64	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-0-3-1E-5	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=976916068	OIDplus Information Object X.500 DN