PKI and large CRL’s

Came across an interesting item the other day.  In the enterprise PKI services I saw our LDAP CRL publishing failing.  Apparently, this was due to the CRL being larger than 10MB in size. This happened when there are more than 250,000 revoked certs.  I was able to identify the problem of run away cert generation and […]