Which of the following manages the digital certificate life cycle to ensure adequate security and
controls exist in digital signature applications related to e-commerce?

A.
Registration authority

B.
Certificate authority (CA)

C.
Certification relocation list

D.
Certification practice statement

Explanation:
The certificate authority maintains a directory of digital certificates for the reference of those
receiving them, it manages the certificate life cycle, including certificate directory maintenance and
certificate revocation list maintenance and publication. Choice A is not correct because a registration
authority is an optional entity that is responsible for the administrative tasks associated with
registering the end entity that is the subject of the certificate issued by the CA. Choice C is incorrect
since a CRL is an instrument for checking the continued validity of the certificates for which the CA
has responsibility. Choice D is incorrect because a certification practice statement is a detailed set of
rules governing the certificate authority’s operations.