Which of the following provides a static record of all certificates that are no longer valid?

A.
Private key

B.
Recovery agent

C.
CRLs

D.
CA

Explanation:
The CRL (Certificate revocation list) is exactly what its name implies: a list of subscribers paired
with digital certificate status. The list enumerates revoked certificates along with the reason(s) for
revocation. The dates of certificate issue, and the entities that issued them, are also included. In
addition, each list contains a proposed date for the next release. When a potential user attempts to
access a server, the server allows or denies access based on the CRL entry for that particular
user.