| (I) An X.500 Directory entry or other information source that is
named in a v3 X.509 public-key certificate extension as a location
from which to obtain a CRL that might list the certificate.
(C) A v3 X.509 public-key certificate may have a
"cRLDistributionPoints" extension that names places to get CRLs on
which the certificate might be listed. A CRL obtained from a
distribution point may (a) cover either all reasons for which a
certificate might be revoked or only some of the reasons, (b) be
issued by either the authority that signed the certificate or some
other authority, and (c) contain revocation entries for only a
subset of the full set of certificates issued by one CA or (c')
contain revocation entries for multiple CAs.
|
