Certificate revocation list (CRL)
- Term
- Certificate revocation list (CRL)
- Exam
- CISA
- Definition
A list of certificates revoked before their expiry date.
- Explained
A CRL lists certificates revoked before their expiry, for example after a key compromise. Relying parties check it, or query OCSP, before trusting a certificate.
- In practice
A browser checks that a website's certificate has not been revoked after its key leaked.
- Often confused with
- Certificate expiry
- Exam angle
OCSP provides the same check online.
- Related