What does CRL stand for?

What does CRL stand for?

• A. Certificate Revocation List
• B. Certificate Registry List
• C. Certification Revocation Log
• D. Credential Revocation Ledger

Answer: (A)

In PKI, a reliable way to convey that a certificate should no longer be trusted is through a published list of revoked certificates. CRL stands for Certificate Revocation List, the official term used to enumerate certificates that have been revoked before their scheduled expiration. The CRL is issued and signed by the certificate authority, and each entry carries the serial number of the revoked certificate plus the revocation date. When a system presents a certificate, it checks the CRL to see if that certificate’s serial number appears on the list; if it does, the certificate is no longer trusted regardless of its expiration. Some environments supplement this with OCSP for on-demand status checks, but the familiar term for this revocation mechanism is Certificate Revocation List. The other phrases aren’t standard PKI terminology and don’t describe the recognized mechanism for tracking revoked certificates.

In PKI, a reliable way to convey that a certificate should no longer be trusted is through a published list of revoked certificates. CRL stands for Certificate Revocation List, the official term used to enumerate certificates that have been revoked before their scheduled expiration. The CRL is issued and signed by the certificate authority, and each entry carries the serial number of the revoked certificate plus the revocation date. When a system presents a certificate, it checks the CRL to see if that certificate’s serial number appears on the list; if it does, the certificate is no longer trusted regardless of its expiration. Some environments supplement this with OCSP for on-demand status checks, but the familiar term for this revocation mechanism is Certificate Revocation List. The other phrases aren’t standard PKI terminology and don’t describe the recognized mechanism for tracking revoked certificates.