Deactivated State

# Description

The state for a key whose operational lifetime has ended, whether by expiry or by an operator cutting it short, but which has not yet been destroyed. A deactivated key may no longer protect new traffic and may be retained in this state indefinitely, typically so data already protected under it can still be read.