CRL (Certificate Revocation List)

A CRL (Certificate Revocation List) is a list published periodically by a certification authority listing certificates revoked before their expiry date, generally due to key compromise or identity change. When verifying a digital signature, the software consults the CRL (or uses OCSP) to ensure the signatory's certificate has not been revoked at the time of signing.