RevocationReason
RFC 5280 §5.3.1 CRLReason code values.
removeFromCRL is used in delta CRLs to un-hold a certificate.
ts
type RevocationReason = unspecified | keyCompromise | cACompromise | affiliationChanged | superseded | cessationOfOperation | certificateHold | removeFromCRL | privilegeWithdrawn | aACompromise