If a certificate has been compromised, which of the following should be done?

A.
Run the recovery agent.

B.
Put the certificate on the CRL.

C.
Put the certificate in key escrow.

D.
Suspend the certificate for further investigation.