Certificate Revocation List

File Format
Name	Certificate Revocation List
Ontology	Electronic File Formats Security Certificate Revocation List
Extension(s)	.crl, .pem

A Certificate Revocation List (CRL) is a cryptographically-signed list of certificates that a certificate authority has declared to be revoked.

A CRL file may be encoded in PEM format, DER format, or possibly some other format.

Identification

A PEM-encoded CRL file is plain text, with base64-encoded payload data. It contains a line that reads "-----BEGIN X509 CRL -----".

Examples

To view the contents of a PEM-encoded CRL file, using OpenSSL:

 openssl crl -noout -text -in example.crl

Software

• OpenSSL