This is similar to a web interface for CA. Users, computers, or services can request certificates using web interface. Using the interface, users also can download the root certificates and intermediate certificates in order to validate the certificate. This can be used to request certificate revocation list (CRL). This list includes all the certificates expired or revoked within its PKI. If any presented certificate matches entry in the CRL, it will be automatically refused.