
|
Revocation Information Appendix Provides an alternative to the X.509 expiredCertsOnCRL extension Enables cumulative CRLs to be used to validate any certificate issued during a large time interval (up to validity of the CA) using typical logic (i.e., thisUpdate < time of interest < nextUpdate) |