CertificateRevokedException (Java SE 25 & JDK 25)
Description: declaration: module: java.base, package: java.security.cert, class: CertificateRevokedException
Keywords: java.security.cert.CertificateRevokedException class

# Class CertificateRevokedException

java.lang.Object
java.lang.Throwable
java.lang.Exception
java.security.GeneralSecurityException
java.security.cert.CertificateException
java.security.cert.CertificateRevokedException

All Implemented Interfaces:
  `Serializable`

public class CertificateRevokedException extends CertificateException
An exception that indicates an X.509 certificate is revoked. A `CertificateRevokedException` contains additional information about the revoked certificate, such as the date on which the certificate was revoked and the reason it was revoked.

Since:
  1.7
See Also:
  - `CertPathValidatorException`
  - Serialized Form

- ## Constructor Summary

  Constructors
  Constructor
  Description
  `CertificateRevokedException(Date revocationDate, CRLReason reason, X500Principal authority, Map<String, Extension> extensions)`
  Constructs a `CertificateRevokedException` with the specified revocation date, reason code, authority name, and map of extensions.

- ## Method Summary

  Modifier and Type
  Method
  Description
  `X500Principal`
  `getAuthorityName()`
  Returns the name of the authority that signed the certificate's revocation status information.
  `Map<String, Extension>`
  `getExtensions()`
  Returns a map of X.509 extensions containing additional information about the revoked certificate, such as the Invalidity Date Extension.
  `Date`
  `getInvalidityDate()`
  Returns the invalidity date, as specified in the Invalidity Date extension of this `CertificateRevokedException`.
  `Date`
  `getRevocationDate()`
  Returns the date on which the certificate was revoked.
  `CRLReason`
  `getRevocationReason()`
  Returns the reason the certificate was revoked.

  ### Methods declared in class Throwable

  `addSuppressed, fillInStackTrace, getCause, getLocalizedMessage, getMessage, getStackTrace, getSuppressed, initCause, printStackTrace, printStackTrace, printStackTrace, setStackTrace, toString`

  ### Methods declared in class Object

  `clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait`

- ## Constructor Details

  - ### CertificateRevokedException

    public CertificateRevokedException(Date revocationDate, CRLReason reason, X500Principal authority, Map<String, Extension> extensions)
    Constructs a `CertificateRevokedException` with the specified revocation date, reason code, authority name, and map of extensions.
    Parameters:
      `revocationDate` - the date on which the certificate was revoked. The date is copied to protect against subsequent modification.
      `reason` - the revocation reason
      `authority` - the `X500Principal` that represents the name of the authority that signed the certificate's revocation status information
      `extensions` - a map of X.509 Extensions. Each key is an OID String that maps to the corresponding Extension. The map is copied to prevent subsequent modification.
    Throws:
      `NullPointerException` - if `revocationDate`, `reason`, `authority`, or `extensions` is `null`
      `ClassCastException` - if `extensions` contains an incorrectly typed key or value

- ## Method Details

  - ### getRevocationDate

    public Date getRevocationDate()
    Returns the date on which the certificate was revoked. A new copy is returned each time the method is invoked to protect against subsequent modification.
    Returns:
      the revocation date

  - ### getRevocationReason

    public CRLReason getRevocationReason()
    Returns the reason the certificate was revoked.
    Returns:
      the revocation reason

  - ### getAuthorityName

    public X500Principal getAuthorityName()
    Returns the name of the authority that signed the certificate's revocation status information.
    Returns:
      the `X500Principal` that represents the name of the authority that signed the certificate's revocation status information

  - ### getInvalidityDate

    public Date getInvalidityDate()
    Returns the invalidity date, as specified in the Invalidity Date extension of this `CertificateRevokedException`. The invalidity date is the date on which it is known or suspected that the private key was compromised or that the certificate otherwise became invalid. This implementation calls `getExtensions()` and checks the returned map for an entry for the Invalidity Date extension OID ("2.5.29.24"). If found, it returns the invalidity date in the extension; otherwise null. A new Date object is returned each time the method is invoked to protect against subsequent modification.
    Returns:
      the invalidity date, or `null` if not specified

  - ### getExtensions

    public Map<String, Extension> getExtensions()
    Returns a map of X.509 extensions containing additional information about the revoked certificate, such as the Invalidity Date Extension. Each key is an OID String that maps to the corresponding Extension.
    Returns:
      an unmodifiable map of X.509 extensions, or an empty map if there are no extensions