When a user leaves an organization or when a key is compromised, a certificate must be revoked.
The Certificate Authority does this by using and distributing a:

A.
Certification Invocation List (CIL).

B.
Revocation of Certification (ROC).

C.
Authority Certification List (ACL).

D.
Certification Revocation List (CRL).

E.
Certification Key List (CKL).

Explanation:

: Here is the information obtained in the CCSE official courseware: “When a user leaves an
organization, or when a key is compromised, the certificate must be revoked. The certification
authority does this by issuing and distributing a Certificate Revocation List (CRL). Before
accepting a certificate, the CRL should be checked to confirm that the certificate has not been
revoked. The CRL distribution point is usually a Web Server. See Page 8.9 of CCSE NG Official
Courseware. (VPN1-FW1 Management II NG FP-1).