Certificate-Based User Authentications

Question 1

Certificate Revocation List(CRL)

Answer 1

This is basically a singed list that the CA publishes on a website that can be read by the authentication servers

Question 2

Online Certificate Status Protocol (OCSP)

Answer 2

OSCP allows the authentication server to send a real-time request (similar to an HTTP web request) to the service running on the CA or another device and checking the status of the certificate right then and there

Question 3

CAP

Answer 3

certificate Authentication Profile- examine a specific field and map it to username for authorization