Simple definition
List published by a certification authority containing revoked certificates.
Technical definition
A list published by a certification authority containing revoked certificates. In a professional environment, this mechanism usually integrates with other services to enable customers to verify a certificate is no longer approved.
What is it used for?
allow clients to verify that a certificate is no longer approved.
Practical example
a post downloads the CRL an internal PKI to control a certificate.
Common issues
- expired certificate or name not covered
- incomplete confidence chain
- wrong key, revocation or automation of renewal
Key takeaway: Always adapt the diagnosis to the product version and the architecture actually deployed.