
4. If an assessment is performed before the next CRL update, Security Manager will not access the
CRL to check for certificate revocation. If an assessment occurs after the next update of the CRL,
Security Manager does access the CRL to check for revoked certificates. Continuing with this
example, Security Manager accessed the CRL and was provided information about the revoked
certificate. The next image shows a network capture that includes revoked certificate information.
In the capture, you will see the certificate serial number and the reason for revocation. As
mentioned earlier, the CRL is a collection of certificate serial numbers.
In the next image, you will see that the certificate serial number provided in the network packet
matches the serial number of the installed certificate.
Comentarios a estos manuales