UnrecognizedReasonCodePolicy

UnrecognizedReasonCodePolicy

Treatment of revocation evidence whose CRLReason is an UnrecognizedRevocationReason. RFC 5280 §5.3.1 and Appendix B do not say what a relying party does with such a code.

• 'revoked': the certificate is revoked, with the code reported (default). A certificate that a CRL or OCSP response revokes is never reported good.
• 'reject': the evidence cannot settle the certificate's status.

type UnrecognizedReasonCodePolicy = "revoked" | "reject"