Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT Deployment Manual page 66

Chapter 5. Planning the Certificate System
Figure 5.1. CA Only Certificate System
All of the basic processing for requests and issuing certificates can handled by the Certificate
Manager, and it is the only required subsystem. There can be a single Certificate Manager or many
Certificate managers, arranged in many different relationships, depending on the demands of the
organization.
Along with issuing certificates, a Certificate Manager can also revoke certificates. One question for
administrators is how to handle certificates if they are lost, compromised, or if the person or equipment
for which they are issued leaves the company. Revoking a certificate invalidates it before its expiration
date, and a list of revoked certificates is compiled and published by the issuing CA so that clients can
verify the certificate status.
56