Share via


3.2.1.4.3.2.38 PropID = 0x00000026 (CR_PROP_CABACKWARDCROSSCERTSTATE) "CA Backward Cross Certificate State"

The client requested the state of all backward cross certificates. If the server implements the Signing_Backward_Cross_Certificate column, it MUST return a byte array that contains the status for each of the backward cross certificates. Otherwise, the server MUST return an empty CERTTRANSBLOB (section 2.2.2.2) structure.

The possible disposition's values SHOULD be a set of values in the following table.

 Value

 Meaning

CA_DISP_INCOMPLETE (0x00)

The certificate is incomplete.

CA_DISP_ERROR (0x01)

The certificate is unavailable.

CA_DISP_REVOKED (0x02)

The certificate has been revoked.

CA_DISP_VALID (0x03)

The certificate is valid.

CA_DISP_INVALID (0x04)

The certificate has expired.

The CA MUST return the byte array in a CERTTRANSBLOB structure. The first byte MUST identify the status for the first backward cross certificate, and the second byte MUST identify the same for the second backward cross certificate. Subsequent bytes MUST repeat this pattern.