Creating a Certificate Revocation List Distribution Point for Your Internal Certification Authority

Certificates rely on certification authorities to maintain an updated list of revoked certificates issued by the public key infrastructure. Certificates are revoked for a number of reasons—not all revocations are for compromised certificates or nefarious reasons. It is essential that when a computer is presented a revoked certificate, that it does not honor the certificate. The common means to inform computers of revoked certificates is by using a certificate revocation list (CRL). Ensuring...(read more)