Digital Certificates
Certificate authorities may revoke digital certificates before the expiration date listed in the digital certificate
- Revoked certificate ID numbers are placed in a certificate revocation list (CRL)
- Verifier must check with the certificate authority to determine if a digital certificate is on the CRL
Without the CRL check, digital certificates do not support authentication