CheckChainRevocationValue

CheckChainRevocationValue

Detailed revocation check results.

Returned as CheckChainRevocationResult.value from checkChainRevocation. Contains both the policy decision and detailed per-certificate findings for debugging.

interface CheckChainRevocationValue {
	readonly decision: "allow" | "deny";
	readonly summary: {
  readonly revokedCertificates: readonly ParsedCertificate[];
  readonly indeterminateCertificates: readonly ParsedCertificate[]
};
	readonly certificates: readonly CertificateRevocationStatus[];
	readonly executionErrors?: readonly RevocationExecutionError[];
}

Properties

• readonly decision: "allow" | "deny" — Final policy decision based on RevocationPolicy.

  • 'allow': chain passes revocation check
  • 'deny': chain fails (revoked certificate or hard-fail on indeterminate)

• readonly summary: { readonly revokedCertificates: readonly ParsedCertificate[]; readonly indeterminateCertificates: readonly ParsedCertificate[] } — Quick-access summary of problematic certificates.

• readonly certificates: readonly CertificateRevocationStatus[] — Per-certificate evaluation results. See CertificateRevocationStatus.

• readonly executionErrors?: readonly RevocationExecutionError[] — Evidence that could not be processed. See RevocationExecutionError.