CRL

Simple definition

List published by a certification authority containing revoked certificates.

Technical definition

A list published by a certification authority containing revoked certificates. In a professional environment, this mechanism usually integrates with other services to enable customers to verify a certificate is no longer approved.

What is it used for?

allow clients to verify that a certificate is no longer approved.

Practical example

a post downloads the CRL an internal PKI to control a certificate.

Common issues

• expired certificate or name not covered
• incomplete confidence chain
• wrong key, revocation or automation of renewal

Key takeaway: Always adapt the diagnosis to the product version and the architecture actually deployed.