Select the General tab of the Configuration page to configure the CRL (Certificate Revocation List) generation.

Hostname

The public domain name or IP address of a node in the PKI Hub cluster. 

This value can correspond to the domain name or IP address assigned by a proxy or load balancer that redirects traffic to the node.

Each CA instance will publish a non-partitioned Certificate Revocation List at the following URI.

http://{hostname}/crl/{organization}/{caid}/crl.crl

Where:

Mandatory: Yes.

CRL Generation (in days)

The number of days between each CRL issuance.

Mandatory: No. When omitting this value, the Certificate Authorities solution does not issue CRLs.