Public key certificates and keys that are compromised or were issued fraudulently are listed on which of the following?

PKI (Public Key Infrastructure) is the entire framework of policies, hardware, software, and procedures used to manage digital certificates - it is the system, not a specific revocation list.

An ACL (Access Control List) is used to control permissions to resources on a network or system and has no role in certificate revocation or PKI.

A CA (Certificate Authority) issues and signs certificates and publishes the CRL, but the CA itself is not the list - the CRL is the specific artifact that contains revoked certificate entries.

The CRL (Certificate Revocation List) is a data structure signed by a Certificate Authority that explicitly lists certificates that have been revoked. When a certificate is compromised or was issued fraudulently, the CA adds its serial number to the CRL so that clients can check validity before trusting it. This is a fundamental mechanism of PKI trust management.