A Certificate Revocation List (CRL) is a signed list published by a Certificate Authority that identifies certificates which have been revoked before their scheduled expiration date, for reasons such as key compromise or the certificate no longer being needed. Clients can download and check a CRL to determine whether a certificate they are relying on is still valid, though this approach has largely been supplemented or replaced in many contexts by the more efficient real- time OCSP protocol.