CRL (Certificate Revocation List)

A CRL (certificate revocation list) is a list published periodically by a certification authority listing certificates revoked before their expiration date, usually due to key compromise or change of identity. When verifying a digital signature, the software consults the CRL (or uses OCSP) to ensure that the signer''s certificate was not revoked at the time of signature.