CRL
Certificate Revocation List
Domain 1: General Security Concepts
A list of digital certificates that have been revoked by the issuing CA before their expiration date. Clients check CRLs to verify certificate validity.
Exam Tip
CRL is a list (can be large); OCSP is real-time checking (more efficient).