Create and publish a certificate revocation list
Sometimes it is necessary for a certificate issued by a certification authority to be taken out of service even before its expiration date. To make this possible, a certification authority maintains a certificate revocation list (CRL). This is a signed file with a relatively short expiration date, which is used in combination with the certificate to check its validity.
After a certificate has been revoked, a new CRL must be created and published so that entities that check the revocation status are informed of the revocation. Since the CRL has a relatively short expiration date, it must be reissued at regular intervals even if the content is not changed.
Continue reading "Create and publish a certificate revocation list"