And a new certificate validating mechanism is put forward by using advantage of CRL and OCSP.

• 详细地分析了CRL和OCSP两种证书撤销机制的优点和局限性,结合两者各自的优点,提出了一个高效实用的证书验证机制。