From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts
Unlock the full course today
Join today to access over 23,200 courses taught by industry experts.
Revoke a digital certificate
From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts
Revoke a digital certificate
The security of digital certificates depends upon the security of the private keys associated with those certificates. If the certificate owner's private key is compromised, the owner needs a way to revoke the digital certificate so that it can't be used to impersonate them. There are two methods for revoking a digital certificate. Both are maintained by the certificate authority who issued the certificate. The original approach is the certificate revocation list or CRL. When the CA wishes to revoke a digital certificate using the CRL, it places the serial number of that certificate on its CRL. Anyone accessing a digital certificate is responsible for downloading the certificate revocation list and verifying that the serial number of the certificate they're verifying is not included on that list before relying upon the certificate. Now, this approach is inefficient because it often has time delays and consumes a lot of network bandwidth, as everyone on the Internet attempted to…
Contents
-
-
-
-
-
-
-
-
(Locked)
Trust models2m 52s
-
(Locked)
PKI and digital certificates4m 5s
-
(Locked)
Hash functions7m 38s
-
(Locked)
Digital signatures3m 50s
-
(Locked)
Digital signature standard1m 27s
-
(Locked)
Create a digital certificate4m 55s
-
(Locked)
Revoke a digital certificate1m 28s
-
(Locked)
Certificate stapling2m 29s
-
(Locked)
Certificate authorities6m 13s
-
(Locked)
Certificate subjects3m 35s
-
(Locked)
Certificate types2m 55s
-
(Locked)
Certificate formats2m 30s
-
(Locked)
-
-