######## UNCLASSIFIED ######## ##### DoD Approved External PKI CRLDP URL List ##### This file lists the CRL Distribution Points (CRLDP) for all DoD approved external partner agencies/organizations. This list is developed and maintained by DoD PKE based on CRLDP values asserted in sample certificates provided to DoD by the partner PKI for testing; it is provided for ease of reference and may not be exhaustive in all cases. Any CRL URL asserted in a CRLDP extension of an approved certificate is approved for use by DoD relying parties. # Version 1.21 - Last Updated October 21, 2024 ##### Bridge Certification Authorities (for relying parties using cross-certificate trust) ##### http://repo.fpki.gov/bridge/fbcag4.crl http://certipath-crl.symauth.com/CertiPathBridgeCA-G2.crl http://tscp-crl.symauth.com/tscpbcasha256.crl ##### Australian Defence Organisation ##### http://crl.defence.gov.au/pki/crl/ADIOCA.crl http://crl.defence.gov.au/pki/crl/ADPRCA.crl http://crl.defence.gov.au/pki/crl/ADPDCA.crl http://crl.defence.gov.au/pki/crl/ADPICA.crl http://crl.defence.gov.au/pki/crl/ADPICAG2.crl http://crl.defence.gov.au/pki/crl/ADPICAAEG2.crl ##### Boeing ##### http://crl.boeing.com/crl/Boeing%20PCA%20G3.crl http://crl.boeing.com/crl/Boeing%20Medium%20Assurance%20Hardware%20Issuing%20CA%20G3.crl ##### Carillon Federal Services ##### http://pub.carillonfedserv.com/CRL/CFSRCA1.crl http://pub.carillonfedserv.com/CRL/CFSCA1.crl https://pub.carillonfedserv.com/CRL/CFSCA2.crl ##### Carillon Information Security ##### http://pub.carillon.ca/CRL/CISG2RCA2.crl http://pub.carillon.ca/CRL/CISCA2.crl ##### Department of State ##### http://crls.pki.state.gov/crls/DoSADPKIRootCA.crl http://crls.pki.state.gov/crls/DoSADPKIRootCA1.crl http://crls.pki.state.gov/crls/DoSADPKIPIVCA2.crl http://crls.pki.state.gov/crls/DoSADPKIPIVCA2-1.crl http://crls.pki.state.gov/crls/DoSADPKIHACA.crl http://crls.pki.state.gov/crls/DoSADPKIHACAsha256.crl http://crls.pki.state.gov/crls/DoSADPKIHACA-1.crl ##### DigiCert Federal SSP ##### http://repo.fpki.gov/fcpca/fcpcag2.crl http://ssp-crl.symauth.com/SSP/SSPG4.crl http://onsitecrl.verisign.com/USDepartmentofTransportationFAAPIVG4/LatestCRL.crl http://ssp-crl.digicert.com/SSP/SSPG5.crl http://pki-crl.symauth.com/ca_c61a204870a95c10f01353ce1fbdfead/LatestCRL.crl ##### DigiCert NFI ##### http://ssp-crl.symauth.com/STNSSP/DigiCertClass3NonFederalSSPPrivateRootCAG2.crl http://ssp-crl.digicert.com/NFSSP/Class3SSPCAG4.crl http://pki-crl.symauth.com/ca_fc26996dc726cf860f12aa77d4270098/LatestCRL.crl ##### Entrust Federal SSP ##### http://rootweb.managed.entrust.com/CRLs/EMSRootCA2.crl http://rootweb.managed.entrust.com/CRLs/EMSRootCA3.crl http://rootweb.managed.entrust.com/CRLs/EMSRootCA4.crl http://sspweb.managed.entrust.com/CRLs/EMSSSPCA2.crl http://sspweb.managed.entrust.com/CRLs/EMSSSPCA3.crl http://sspweb.managed.entrust.com/CRLs/EMSSSPCA4.crl http://hhspkicrl.managed.entrust.com/CRLs/HHSEntrustCA.crl http://hhspkicrl.managed.entrust.com/CRLs/HHSEntrustCA1.crl ##### Entrust Managed Services NFI ##### http://nfirootweb.managed.entrust.com/CRLs/NFIRootCA2.crl http://nfirootweb.managed.entrust.com/CRLs/NFIRootCA3.crl http://nfimediumsspweb.managed.entrust.com/CRLs/NFIMEDIUMSSPCA1.crl http://nfimediumsspweb.managed.entrust.com/CRLs/NFIMEDIUMSSPCA2.crl ##### Exostar LLC ##### http://www.fis.evincible.com/fis/public/ERCA2.crl http://www.fis.evincible.com/fis/public/ESCA4.crl ##### IdenTrust NFI ##### http://validation.identrust.com/crl/igcrootca1.crl http://validation.identrust.com/crl/bahpivica01.crl ##### Lockheed Martin ##### http://crl.external.lmco.com/crl/certupd/Lockheed%20Martin%20Root%20Certification%20Authority%202.crl http://crl.external.lmco.com/crl/certupd/Lockheed%20Martin%20Certification%20Authority%204%20G2.crl http://crl.external.lmco.com/crl/certupd/Lockheed%20Martin%20Root%20Certification%20Authority%206.crl http://crl.external.lmco.com/crl/certupd/Lockheed%20Martin%20Certification%20Authority%206%20G3.crl ##### Netherlands Ministry of Defence ##### http://crl.pkioverheid.nl/RootLatestCRL-G3.crl http://crl.pkioverheid.nl/DomOrganisatiePersoonLatestCRL-G3.crl http://crls.ca.pkidefensie.nl/mindef-ca-3.crl ##### Northrop Grumman ##### http://certdata.northropgrumman.com/certdata/crls/RevokedByNorthropGrummanCorporateRootCA-G2.crl http://certdata.northropgrumman.com/certdata/crls/RevokedByNorthropGrummanCorporateSigningCA-G2.crl http://certdata.northropgrumman.com/certdata/crls/RevokedByNorthropGrummanCorporateRootCA-384.crl http://certdata.northropgrumman.com/certdata/crls/RevokedByNorthropGrummanCorporateSigningCA-384.crl ##### Raytheon ##### http://pki.rtx.com/G3/CRLs/Root-G3_Full.crl http://pki.rtx.com/G3/CRLs/Class3-G3_Full.crl ##### US Treasury SSP ##### # Note: Some Treasury PKI certificates list "pki.treas.gov" in place of "pki.treasury.gov" - both are aliases for the same site # US Treasury Root Certification Authority (TRCA) http://pki.treasury.gov/US_Treasury_Root_CA.crl http://pki.treasury.gov/US_Treasury_Root_CA1.crl # Department of Homeland Security Certification Authority (DHSCA) http://pki.treasury.gov/DHS_CA.crl http://pki.treasury.gov/DHS_CA2.crl http://pki.treasury.gov/DHS_CA3.crl http://pki.treasury.gov/DHS_CA4.crl http://pki.dimc.dhs.gov/DHS_CA.crl http://pki.dimc.dhs.gov/DHS_CA2.crl http://pki.dimc.dhs.gov/DHS_CA3.crl http://pki.dimc.dhs.gov/DHS_CA4.crl # Fiscal Services CA http://pki.treas.gov/FS_CA.crl # NASA Operational Certification Authority (NOCA) http://pki.treasury.gov/NASA_Operational_CA.crl http://pki.treasury.gov/NASA_Operational_CA3.crl http://pki.treasury.gov/NASA_Operational_CA4.crl http://pki.treasury.gov/NASA_Operational_CA5.crl http://hc.nasa.gov/combinedCRL5.crl # Treasury OCIO Certification Authority (TOCA) http://pki.treasury.gov/OCIO_CA.crl http://pki.treasury.gov/OCIO_CA4.crl http://pki.treasury.gov/OCIO_CA5.crl http://pki.treasury.gov/OCIO_CA6.crl # Social Security Administration Certification Authority (SSACA) http://pki.treasury.gov/SSA_CA.crl http://pki.treasury.gov/SSA_CA2.crl http://pki.treasury.gov/SSA_CA3.crl http://pki.treasury.gov/SSA_CA4.crl # Department of Veterans Affairs Certification Authority (VACA) http://pki.treasury.gov/VA_CA.crl http://pki.treasury.gov/VA_CA1.crl http://pki.treasury.gov/VA_CA2.crl http://pki.treasury.gov/VA_CA3.crl http://crl.pki.va.gov/PKI/CRL/VA_CA.crl http://crl.pki.va.gov/PKI/CRL/VA_CA1.crl http://crl.pki.va.gov/PKI/CRL/VA_CA2.crl http://crl.pki.va.gov/PKI/CRL/VA_CA3.crl ##### Verizon/Cybertrust Federal SSP ##### http://repo.fpki.gov/fcpca/fcpcag2.crl http://cdp1.ssp-strong-id.net/CDP/VZ-SSP-CA-A2.crl http://crl.pki.va.gov/PKI/CRL/VET-SSP-CA-B1.crl ##### WidePoint Federal SSP ##### http://repo.fpki.gov/fcpca/fcpcag2.crl http://crl-server.orc.com/CRLs/WPSSPIntCA.crl http://crl-server.orc.com/CRLs/DoTAgencyCAG6.crl ##### WidePoint NFI ##### http://crl-server.orc.com/CRLs/WIDEPOINTNFIROOT2.crl http://crl.xca.xpki.com/CRLs/XTec_PIVI_CA1.crl http://crl-server.orc.com/CRLs/WIDEPOINTNFI5.crl http://crl-server.orc.com/CRLs/SenatePIVICAG6.crl ######## UNCLASSIFIED ########