Re: Issuing Distribution Point extension understanding

Bonjour,

This extension allows the CRL issuer (generally the CA) to declare that the
given CRL is of a limited scope, i.e. that this CRL only covers a subset of
all the certificates covered by the CRL issuer.

If this extension is not present, then the CRL provides a revocation status
for all the certificates under the CRL issuer's responsibility.

The certificates covered by the CRL issuer can be segmented by User/CA
certificate types, by revocation reasons, or by distribution point (which
will be present in the CRLDP extension of those certificates).

2016-07-25 16:51 GMT+02:00 Security Developer <
[email protected]>:

> Dear All,
>
> Could any body please explain the Issuing Distribution Point extension in
> CRL? Thanks
>
> As per RFC 5280, the description seems bit cryptic to me.
>
> Regards,
>

-- 
Erwann.

_______________________________________________
pkix mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/pkix