Which list contains certificates that were revoked before their expiration date?

Which list contains certificates that were revoked before their expiration date?

• A. Online Certificate Status Protocol (OCSP)
• B. Certificate revocation list (CRL)
• C. Entropy
• D. PRNG

Answer: (B)

The concept here is how revocation information is published and used to distrust certificates that should no longer be trusted. A certificate revocation list is exactly the published, digitally signed list that contains the serial numbers of certificates that have been revoked before their expiration. Seeing a certificate’s serial number on this list tells clients that the certificate should no longer be trusted, even though its validity period might not have ended. This contrasts with OCSP, which is a real-time query to check status without delivering a full list. Entropy and PRNG are related to randomness, not certificate revocation. So the item that contains certificates revoked before their expiration date is the Certificate Revocation List.

The concept here is how revocation information is published and used to distrust certificates that should no longer be trusted. A certificate revocation list is exactly the published, digitally signed list that contains the serial numbers of certificates that have been revoked before their expiration. Seeing a certificate’s serial number on this list tells clients that the certificate should no longer be trusted, even though its validity period might not have ended. This contrasts with OCSP, which is a real-time query to check status without delivering a full list. Entropy and PRNG are related to randomness, not certificate revocation. So the item that contains certificates revoked before their expiration date is the Certificate Revocation List.