108   Alignment for revoation handling of short term certificates for PK and A certificates

Created: 11 Apr 2025

Status: Approval (Future Improvement)

Part: Part 9 (2023, Edition2)

Links:

Page: 68

Clause: 7.4.4.10.9

Paragraph: all

Issue

To make the security policy explicit if no revocation information is provided, the noRevAvail extension should be utilized also for public-key certificates, which is already considered for attribute certificates (table 2 and clause 7.4.5.8.3).
That way, an issuing CA can explicitly state, that for certain certificates revocation information will not be provided.
This avoids implicit assumptions about the availability of revocation information.

Proposal

Proposal to support extension also for Public Key Certificates.
Leads to
- enhancing Table 1 with the respective entry (also applying C2 as condition)
- own sub-clause for the verification, which essentially takes information from clauses 7.4.4.10.9 and 7.4.4.10.10 as well as the existing handling of the noRevAvail extension for attribute certificates in subclause 7.4.5.8.3.
- combination of CRLDP or AIA and noRevAvail is not allowed.