A CRL or OCSP response the issuer signed lists the certificate as revoked (see RevocationTime).
Revoked = 2