Which of the following is true about the CRL?

A.
It should be kept public

B.
It signs other keys

C.
It must be kept secret

D.
It must be encrypted