Share via

2.2.9.3.4 CONDITIONLIST

  • Article

If the SLC was issued with custom revocation authorities specified, it SHOULD contain a CONDITIONLIST element that describes one or more revocation authorities with its public key.

The CONDITIONLIST element MUST use the following template.

 <CONDITIONLIST>
    <REFRESH>
       [[- distributionpoint1 -]]
       [[- distributionpoint2 -]]
       <INTERVALTIME />
    </REFRESH>
 </CONDITIONLIST>

[[- distributionpoint1 -]]: MUST be a DISTRIBUTIONPOINT (section 2.2.9.3.5) element that contains the public key of the issuer of the SLC, as specified in DISTRIBUTIONPOINT.

[[- distributionpoint2 -]]: MUST contain at least one DISTRIBUTIONPOINT element that contains the public key of a third-party revocation authority that is allowed to revoke the SLC. If more than one third-party revocation authority is allowed to revoke the SLC, this includes additional DISTRIBUTIONPOINT elements as peers, with one element for each revocation authority, as specified in DISTRIBUTIONPOINT.