When employees that use certificates leave the company they should be added to the following:
The certificates of the leaving employees must be made unusable. This is done by revoking them. The revoke
certificates end up in the CRL.
Note: The CRL (Certificate revocation list) is exactly what its name implies: a list of subscribers paired with
digital certificate status. The list enumerates revoked certificates along with the reason(s) for revocation. The
dates of certificate issue, and the entities that issued them, are also included. In addition, each list contains a
proposed date for the next release.