18 Alternative Extension to CRL Path Matching Algorithm: Motivation In lieu of path matching algorithm presented, one can determine if the CRL is from the same CA as the certificate issuer, if –CRL contains keys or hash of keys used by the CA to sign certificates; and –Certificate in question is signed using one of the keys or key hashes asserted (enumerated) in the CRL by the CA claiming to be certificate signing keys –Enhance cryptographic binding between the CRL signing key and certificate signing key
{}