What is the function of a Certificate Revocation List (CRL) in a PKI?

The correct answer is B. Lists certificates that have been revoked before their expiration date. A Certificate Revocation List (CRL) is a signed list published by a Certificate Authority (CA) that contains the serial numbers of digital certificates that have been revoked before their scheduled expiration date. Certificates may be revoked due to key compromise, CA…

Secure Connectivity and Authentication

Question

Options

ALists expired certificates
BLists certificates that have been revoked before their expiration date
CLists all issued certificates
DLists certificates pending renewal

How the community answered

(61 responses)

A
2% (1)
B
87% (53)
C
8% (5)
D
3% (2)

Explanation

A Certificate Revocation List (CRL) is a signed list published by a Certificate Authority (CA) that contains the serial numbers of digital certificates that have been revoked before their scheduled expiration date. Certificates may be revoked due to key compromise, CA compromise, change of affiliation, or other policy reasons. When a system validates a certificate, it checks the CRL (or uses OCSP) to confirm the certificate has not been revoked. A CRL does not list expired certificates (those simply pass their validity date), all issued certificates (that would be the CA's full registry), or certificates pending renewal.

Topics

#CRL#PKI#Certificate Management#Security Concepts

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice