Invalid CRL Distribution Point in certificate
2 years ago
Originally Published: 2006-10-04
Article Number
000056319
Applies To
Keon Certificate Authority 6.5.1
Issue
An invalid CRL Distribution Point is present in the certificate
Extension profile is configured to set a CRL Distribution Point, but the certificate does not contain the good CRL DP
Local CRL Publishing is enabled on the target CA
Cause
If Local CRL Publishing is enabled on the target CA, the CRL Distribution Point from the target CA configuration will be inserted in the certificate, and the profile based CRL DP will be ignored
Resolution
If the CRL Distribution Point is inconsistent with what is configured in the Extension Profile, ensure that Local CRL Publishing is disabled on the target CA