Skip to content

CertificateRevocation

Record in Oadm.Sdk.Certificates · Oadm.Sdk.dll

One revoked certificate (SDK 0.4.0): kept while the certificate could still be valid.

public sealed record CertificateRevocation(string SerialNumber, DateTime RevokedUtc, RevocationReason Reason, string UserName)

Parameters

Guid? DeviceId { get; init; }

The device the certificate was issued for; null when not known (a serial the list did not hold).

DateTime NotAfterUtc { get; init; }

The end of the certificate’s validity: the entry leaves the list after it.

RevocationReason Reason { get; init; }

Why.

DateTime RevokedUtc { get; init; }

When it was revoked.

string SerialNumber { get; init; }

The serial number (CertificateSerials.Normalize).

string UserName { get; init; }

Who revoked it.

string Describe()

“Certificate revoked on 2026-11-02 (Key compromised)”: the text of a refusal (802.1X log, EST).

static string ReasonText(RevocationReason reason)

“Key compromised”, “Device replaced”, “Device removed”, “Replaced by a newer certificate”, “Other”.