The choice should really be made based on the desired security policy and whether the enterprise is prepared to set up and maintain a certificate revocation list.
实际上，证书类型的选择应该基于理想的安全策略和企业是否准备好建立和维护一个证书撤销列表。
Finally, get familiar with certificate revocation lists and the process for updating them.
最后，熟悉证书撤销列表和更新它们的流程。
With a trust store consisting of a single trusted ca and nothing more, the CRL approaches an equivalent per-DN revocation capability in which revocation of the certificate effectively revokes access.
使用除包含单个受信任存储CA之外没有其他任何内容的信任存储区，CRL提供一个等效的每DN撤销功能，撤销证书将有效撤销访问权。
The one thing that can help, the certificate revocation list, is also external to the queue manager.
唯一一种有效的方法证书撤销列表也位于队列管理器之外。
Revocation in this case must be based on the cryptographic fingerprint of the certificate, and the mechanism that provides this functionality is a certificate revocation list (CRL).
在此情况下，撤销必须基于该证书的加密指纹，而提供此功能的机制就是证书撤销列表(CRL)。
The Server's certificate might be optionally checked against a certificate Revocation List.
可以根据证书撤销列表检查服务器的证书，这一点是可选的。
The use of a certificate revocation list is mandatory when using CA issued certificates.
在使用CA颁发的证书时强制使用证书撤销列表。
For certificate revocation to work properly, the receiver of the certificate must check to see if it is still valid.
为了让证书撤消起作用，证书的接受者必须检查它是否仍然有效。
A certificate revocation list is checked to ensure that the certificate has not been revoked.
检查证书撤销列表以确保证书还没有撤销。
Signature verification, certificate revocation lists (CRLs), and certificate life-span can be used to validate the subscription (token).
签名验证、证书撤销列表（certificate revocation list，CRL），以及利用证书的有效期来验证订阅（令牌符号）。
It is not listed in a certificate revocation list (CRL), which ensures that past subscribers (in other words, those that are no longer customers but were at some time in the past) are denied service.
它没有列入证书撤销列表(certificate revocation list,CRL)中。这样可以确保不为那些过去的订阅者(换句话说，就是那些在过去的某个时间段中是客户，但现在已不再是客户的人)提供服务。
Root.crl (certificate revocation list, optional).
crl(证书撤销列表，可选)。
Workaround: if this feature causes performance problems in your environment, the certificate revocation check can be disabled.
处理：如果这个特性在您的环境出导致性能问题，可以关闭证书撤回的选项。
Certificate revocation can also be checked using the OCSP protocol.
证书的撤销也可以使用OCSP协议进行检查。
The proposed scheme has the advantages of secure private key storage, immediate certificate revocation and distributed trust management.
本方案具有分布式的私钥安全保存，及时的证书撤销和分布式信任管理等优点。
The proposed certificate revocation schemes restrict algorithm performance because they fail to consider the differences between the probabilities of inquiring certificate.
在目前已经提出的证书废除机制中，由于未考虑证书查询概率之间的差异，限制了算法的性能。
Such certificates are published to a Certificate Revocation List, against which both the sender and receiver can choose to check the received certificates.
这样的证书被发布到证书撤销列表（Certificate Revocation List）中，发送方和接收方都可以根据该列表检查接收到的证书。
Certificate revocation is always a hard problem in the research and application of public key infrastructure (PKI).
证书撤销一直是公钥基础设施(PK i)研究和应用中的一个难点问题。
A certificate Revocation List describes certificates that clients should consider invalid.
证书撤回列表表示客户应该视这些证书为无效。
Finally we discuss the mechanisms of certificate revocation and freshness.
最后讨论证书撤销和更新的机制。
This paper introduces the components of PKI and their functions. Certificate revocation and trust models of PKI are emphasized.
文章介绍了PKI的组成、功能等，重点介绍了证书撤销和信任模型。
It researches and discusses the certificate Revocation List CRL method, which is also used to query the certificate revoked status and compares the advantages and disadvantages of each other.
对另一种同样用于查询证书撤销状态的证书撤销列表CRL方法也进行了研究和探讨，并且比较了这两种方法各自的优势和劣势。
We always use certificate Revocation List to save the revoked certificates, and use Lightweight Directory Access Protocol or Online certificate Status Protocol as verification mechanism.
证书的撤销采用证书撤销列表，而用于验证证书状态的机制一般使用轻型目录存取协议或者在线证书状态协议。
Digital certificate status validation system is a necessary part of PKI, which is used to provide certificate revocation information for certificate relier in PKI applications.
数字证书状态验证系统是PKI的一个不可或缺的组成部分，用于在PK I应用中为数字证书依赖者提供相关证书的撤销信息。
Certificate revocation mechanism, which is used to deal with the problem of certificate status in PKI, is a basic core problem of PKI.
证书撤销机制用于处理PK I中的证书状态问题，是PKI的一个基础性核心问题。
Following the analysis of the existing certificate revocation schemes, we propose a new certificate revocation scheme based the difficulty of resolving the Quadratic Residues problem.
在对目前已有证书状态发布方案分析的基础上，本文提出基于二次剩余难解问题的证书撤销状态发布方案。
How does certificate revocation work?
证书吊销是如何工作的？
This paper proposes a scheme of certificate revocation management based on binary search trees.
提出了一种基于二叉搜索树的证书撤消管理方案。
This paper proposes a scheme of certificate revocation management based on binary search trees.
提出了一种基于二叉搜索树的证书撤消管理方案。
应用推荐