Subject: CertificateStatus in PKIX-LDAP Schema?

From: Vesna Hassler <[email-masked]>
Date: Thu, 18 Mar 1999 17:09:01 +0100

Hi,

I hope the PKIX-LDAP Schema will be soon extended with a CertificateStatus
Attribute.

CertStatus from the OCSP is not quite suitable, I think.
My proposal is to replace "good" with "valid", meaning that
- the certificate is in the directory
- the certificate is not expired
- the certificate is not revoked,

and to add a new status called "expired" for certificates that are expired,
are not revoked, and are still available in the directory.

Thanks,
Vesna Hassler

Technical University of Vienna