---
title: "What is CRL and how it works in .net framework?"  
description: "What is CRL and how it works in .net framework?"  
author: "Anonymous User"  
published: 2019-12-11  
updated: 2023-05-30  
canonical: https://www.mindstick.com/forum/145566/what-is-crl-and-how-it-works-in-dot-net-framework  
category: ".net"  
tags: [".net framework"]  
reading_time: 3 minutes  

---

# What is CRL and how it works in .net framework?

[Please describe](https://www.mindstick.com/interview/33713/please-describe-the-relationship-between-seo-and-sem) What is CRL and how it works in .net [framework](https://www.mindstick.com/forum/34615/software-framework-vs-library)

## Replies

### Reply by Aryan Kumar

A CRL (Certificate Revocation List) is a list of digital certificates that have been revoked by their issuer. Revocation can occur for a variety of reasons, such as if the certificate's private key is compromised or if the certificate holder's identity is no longer valid.

In the .NET Framework, CRLs are used to verify the authenticity of digital certificates. When a .NET application loads a digital certificate, it checks the certificate's revocation status by downloading the appropriate CRL from the certificate's issuer. If the certificate is listed on the CRL, the application will not trust the certificate and will not load it.

CRLs are an important part of the security infrastructure of the .NET Framework. They help to protect applications from loading malicious or compromised certificates.

Here are the steps on how CRL works in .NET Framework:

1. When a .NET application loads a digital certificate, it checks the certificate's revocation status by downloading the appropriate CRL from the certificate's issuer.
2. The CRL is a list of digital certificates that have been revoked by their issuer.
3. The CRL is signed by the certificate's issuer, so the application can be sure that the CRL is authentic.
4. The CRL contains the following information about each revoked certificate:

   - The certificate's serial number
   - The date and time the certificate was revoked
   - The reason for revocation

5. The application checks the certificate's serial number against the list of revoked certificates in the CRL.
6. If the certificate's serial number is listed in the CRL, the application will not trust the certificate and will not load it.
7. If the certificate's serial number is not listed in the CRL, the application will trust the certificate and load it.

CRLs are updated periodically, so it is important to make sure that the CRL you are using is up-to-date. You can download CRLs from the certificate's issuer's website.

### Reply by Nishi Tiwari

**CLR stands for Common Language Runtime**. It is an environment which handles the **[execution of program](https://www.mindstick.com/forum/145567/what-is-cts-in-dot-net-framework)**written in any languages of .Net framework. It is also known as execution Engine as it converts the managed code into native code and then executes the program. It performs various functions during the execution of program like **code management, memory management, type safety, security, exception handling, garbage collection and many more**


---

Original Source: https://www.mindstick.com/forum/145566/what-is-crl-and-how-it-works-in-dot-net-framework

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.