使用除包含单个受信任存储CA之外没有其他任何内容的信任存储区，CRL提供一个等效的每DN撤销功能，撤销证书将有效撤销访问权。

With a trust store consisting of a single trusted ca and nothing more, the CRL approaches an equivalent per-DN revocation capability in which revocation of the certificate effectively revokes access.

youdao

合格证明书与合格证书具有同等效力。

Eligible certificate and certificate of conformity have coequal effectiveness.

youdao