Jeff Fong wrote:

>2.    CRL checking
>
For those of you who (like me) were wondering what CRL means:

>   Certificate Revocation List (*CRL*): A type that contains information
>   about certificates whose validity an issuer has prematurely revoked.
>   The information consists of an issuer name, the time of issue, the
>   next scheduled time of issue, and a list of certificate serial
>   numbers and their associated revocation times. The *CRL* is signed by
>   the issuer. The type intended by this specification is the one
>   defined in [KEYM].
>
RFC2312, Section 1.1

Reply via email to