hard
Single Answer
0Annie notices that her browser shows that the certificate for the site she is visiting is not valid. After performing some checks, she sees that the certificate is on the CA's certificate revocation list. Which of the following is not a reason for a certificate to be on a CRL?
Answer Options
A
The CA is compromised.
B
The certificate's private key was compromised.
C
The certificate was signed with a stolen key.
D
The certificate expired.
Correct Answer: D
Explanation
Certificates expire, but expiration does not place them on a CRL. That avoids extremely long CRLs in most cases, and the expired certificate contains sufficient information to know that the certificate is expired without being on a CRL.