| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4873 (0x1309) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | A certificate request extension changed. Request ID: %1 Name: %2 Type: %3 Flags: %4 Data: %5 |
| Event text (German): | A certificate request extension has been changed. Request ID: %1 Name: %2 Type: %3 Flag: %4 Data: %5 |
Month: September 2020
Details of the event with ID 4872 of the source Microsoft-Windows-Security-Auditing
| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4872 (0x1308) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | Certificate Services published the certificate revocation list (CRL). Base CRL: %1 CRL Number: %2 Key Container: %3 Next Publish: %4 Publish URLs: %5 |
| Event text (German): | The certificate services have published the certificate revocation list (CRL). Basic CRL: %1 CRL number: %2 Key container: %3 Next publication: %4 Publication URLs: %5 |
Details of the event with ID 4871 of the source Microsoft-Windows-Security-Auditing
| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4871 (0x1307) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | Certificate Services received a request to publish the certificate revocation list (CRL). Next Update: %1 Publish Base: %2 Publish Delta: %3 |
| Event text (German): | The certificate services have received a request to publish the certificate revocation list (CRL). Next update: %1 Publication basis: %2 Publication delta: %3 |
Details of the event with ID 4870 of the source Microsoft-Windows-Security-Auditing
| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4870 (0x1306) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | Certificate Services revoked a certificate. Serial Number: %1 Reason: %2 |
| Event text (German): | Certificate Services has revoked a certificate. Serial number: %1 Cause: %2 |
Details of the event with ID 4869 of the source Microsoft-Windows-Security-Auditing
| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4869 (0x1305) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | Certificate Services received a resubmitted certificate request. Request ID: %1 |
| Event text (German): | Certificate Services has received a resubmitted certificate request. Request ID: %1 |
Details of the event with ID 4868 of the source Microsoft-Windows-Security-Auditing
| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4868 (0x1304) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | The certificate manager denied a pending certificate request. Request ID: %1 |
| Event text (German): | Certificate management has rejected a pending certificate request. Request ID: %1 |
Details of the event with ID 4719 of the source Microsoft-Windows-Security-Auditing
| Event Source: | Microsoft Windows Security Auditing |
| Event ID: | 4719 (0x126F) |
| Event log: | Security |
| Event type: | Information |
| Event text (English): | System audit policy was changed. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: %4 Audit Policy Change: Category: %5 Subcategory: %6 Subcategory GUID: %7 Changes: %8 |
| Event text (German): | The system monitoring policy has been changed. Applicant: Security ID: %1 Account name: %2 Account domain: %3 Logon ID: %4 Monitoring policy change: Category: %5 Subcategory: %6 Subcategory GUID: %7 Changes: %8 |
Details of the event with ID 134 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 134 (0x86) |
| Event log: | Application |
| Event type: | Information |
| Event text (English): | A certificate in the chain for CA certificate %3 for %1 has expired. %2. |
| Event text (German): | A certificate in the chain for the certification authority certificate "%3" for "%1" has expired. %2. |
Details of the event with ID 133 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 133 (0x85) |
| Event log: | Application |
| Event type: | Error |
| Event text (English): | The certification authority (CA) failed to encode a server extension required to validate a certificate or certification revocation list (CRL). The CA will not issue any certificates or CRLs that do not contain this extension. To correct this problem, use the Certification Authority snap-in to remove any Unicode characters in the URLs for the AIA, CDP, and IDP extensions, then restart the CA. |
| Event text (German): | The server extension required for the verification of a certificate or revocation list could not be encoded by the certification authority. The certification authority will not issue certificates or revocation lists that do not contain this extension. To resolve this issue, use the CA snap-in to remove all Unicode characters in the URLs for the "AIA", "CDP" and "IDP" extensions and then restart the CA. |
Details of the event with ID 132 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 132 (0x84) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_AES_ARCHIVAL_WITH_CAPI_PROV |
| Event text (English): | The certification authority (CA) was unable to perform a decryption operation. This error can occur when an advanced encryption algorithm such as Advanced Encryption Standard (AES) is used and the CA has not been configured to use a CryptoAPI Next Generation (CNG) key storage provider. If this error occurred during certificate enrollment, check the certificate template to ensure that advanced encryption for key archival is not enabled. |
| Event text (German): | A decryption process could not be performed by the certification authority. This error can occur if an advanced encryption algorithm such as the Advanced Encryption Standard (AES) is used and the certificate authority is not configured to use a CNG key storage provider. If this error occurred during certificate enrollment, check the certificate template and make sure that advanced encryption is not enabled for key archiving. |
Details of the event with ID 131 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 131 (0x83) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | An invalid OID has been detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting. To resolve, run: "certutil -getreg ca\EKUOIDsForPublishExpiredCertInCRL" to identify the invalid OID and correct it. The default OIDs ("1.3.6.1.5.5.7.3.3" and "1.3.6.1.4.1.311.61.1.1") will be used. |
| Event text (German): | An invalid OID was detected in the EKUOIDsForPublishExpiredCertInCRL configuration setting. To fix it, run the certutil -getreg ca\EKUOIDsForPublishExpiredCertInCRL command to detect and correct the invalid OID. The default OIDs ("1.3.6.1.5.7.3.3" and "1.3.6.1.4.1.311.61.1.1") are used. |
Details of the event with ID 130 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 130 (0x82) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_E_CRL_CREATION |
| Event text (English): | Active Directory Certificate Services could not create a certificate revocation list. %1. This may cause applications that need to check the revocation status of certificates issued by this CA to fail. You can recreate the certificate revocation list manually by running the following command: "certutil -CRL". If the problem persists, restart Certificate Services. |
| Event text (German): | No certificate revocation list could be created by Active Directory Certificate Services. %1. This may cause an error to occur in applications that require checking the revocation status of certificates issued by this certificate authority. The certificate revocation list can be manually recreated by running the following command: "certutil -CRL". If the problem persists, restart Certificate Services. |
Details of the event with ID 129 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 129 (0x81) |
| Event log: | Application |
| Event type: | Warning |
| Event text (English): | An invalid OID has been detected in the EnabledEKUForDefinedCACert configuration setting. To resolve, run: "certutil -getreg ca\EnabledEKUForDefinedCACert" to identify the invalid OID and correct it. The default OID ("1.3.6.1.5.5.7.3.9") will be used. |
| Event text (German): | An invalid OID was detected in the "EnabledEKUForDefinedCACert" configuration setting. To correct this, execute the command "certutil -getreg ca\EnabledEKUForDefinedCACert" to determine and correct the invalid OID. The default OID ("1.3.6.1.5.5.7.3.9") is used. |
Details of the event with ID 128 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 128 (0x80) |
| Event log: | Application |
| Event type: | Warning |
| Symbolic Name: | MSG_W_REQUEST_CONTAINS_AKI |
| Event text (English): | An Authority Key Identifier was passed as part of the certificate request %1. This feature has not been enabled. To enable specifying a CA key for certificate signing, run: "certutil -setreg ca\UseDefinedCACertInRequest 1" and then restart the service. |
| Event text (German): | A job key identifier was passed as part of the %1 certificate request. This feature is not enabled. To specify a certificate authority key for certificate signing, run the certutil -setreg ca\UseDefinedCACertInRequest 1 command and restart the service. |
Details of the event with ID 127 of the source Microsoft-Windows-CertificationAuthority
| Event Source: | Microsoft-Windows-CertificationAuthority |
| Event ID: | 127 (0x7F) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | MSG_W_EXPIRATION_KRA_CERT |
| Event text (English): | Key recovery certificate %1 is about to expire soon and will not be used upon expiration. Contact your adminstrator to renew this certificate. %2 %3 |
| Event text (German): | The key recovery certificate %1 is about to expire and will no longer be used. Ask the administrator to renew the certificate. %2 %3 |
English 
Deutsch