+1 coinfor reading to the end
+1
Home / Glossary / CRL
Glossary · Security

CRL

Certificate Revocation List

In plain language

A list of digital certificates that have been cancelled before their expiry date and should no longer be trusted.

The metaphor

Like the list of stolen or cancelled keycards kept at the security desk.

Going deeper

How it works

  • The issuer publishes it.
  • Systems check it before trusting a certificate.
  • A certificate is listed if its key was exposed.
  • A faster method called OCSP checks one at a time.
In practice
  • A browser rejects a cancelled certificate.
  • A company revokes a laptop's certificate when it is lost.
  • A VPN checks the list at connection.

A question owners ask

What if the check fails?

Some systems accept the certificate anyway, which is why short lifetimes help.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →