CRL: Certificate Revocation List
Presenter: Namit Kumar Nayan
Date: 17-Dec-2024
CRL overview
• A Certificate Revocation List (CRL) is a component of a public key infrastructure (PKI). A CRL is the list of digital
certificates that have been revoked by issuing certificate authority (CA) before their scheduled expiration date.
These revoked certificates must no longer be trusted for authentication or other purposes.
• CRL feature enables the support of certificate revocation checks for 3rd party issued CA certificates. It is applicable
only for the NMS endpoints external communication using 3rd party CA issued certificates.
• CRL Distribution Points (CRL DP): A Certificate Revocation List Distribution Point (CRLDP) is a URL that hosts a
downloadable CRL file containing a list of certificates revoked by a Certificate Authority (CA).
Impact on Integration
• Whichever NE supports 3rd party certificates, those NEs are impacted in this CRL system feature.
• Implementation was not required from integration side. Only regression testing is enough to check the
impact.
• Selected CBAM and ZTS network element