Data file typically used by Web servers and encryption software; contains a blacklist of revoked digital certificates; stores information about the certificates, such as the issuer and the revocation date; enables security administrators to block untrusted entities.