Re: revocation of expired certificates

This earlier discussion thread on the PKIX mail list may be of interest 
to you: 
https://mailarchive.ietf.org/arch/msg/pkix/yWPB8EpMSpBXDlopjg1Z_-HgT2o/

Revoking certificates that have already expired is not something that is 
commonly done. In fact, Section 4.1.2.5 of RFC 5280 notes:

    The certificate validity period is the time interval during which the
    CA warrants that it will maintain information about the status of the
    certificate.

However, as noted in the thread that I referenced, it is possible to 
included expired certificates in a CRL, and it is possible to inform 
relying parties that an expired certificate would be included in the CRL 
if it were revoked.

On 5/20/22 12:05 AM, KATA Tanej - Contractor wrote:
>
> Hi Sir/Madam,
>
> Myself Tanej, from India. I was referring to RFC 5280 but there is no 
> mention of *revocation of expired certificates. *Can you please refer 
> to this rfc or any standard where it is mentioned
>
> Regards Tanej
>
>
> _______________________________________________
> pkix mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/pkix

_______________________________________________
pkix mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/pkix