Certificate Revocation List (CRL)

Lists all issued certificates that have been revoked due to expiration, misconduct, or site compromise

Each time a new certificate is encountered, the CRL is consulted before verification is attempted

Maintained by the CA