######## UNCLASSIFIED ########


##### DoD Approved External PKI CRLDP URL List

##### This file lists the CRL Distribution Points (CRLDP) for all DoD approved external partner agencies/organizations.  This list is developed and maintained by DoD PKE based on CRLDP values asserted in sample certificates provided to DoD by the partner PKI for testing; it is provided for ease of reference and may not be exhaustive in all cases.  Any CRL URL asserted in a CRLDP extension of an approved certificate is approved for use by DoD relying parties.

# Updated May 24, 2021

##### Bridge Certification Authorities (for relying parties using cross-certificate trust) #####
http://repo.fpki.gov/bridge/fbcag4.crl
http://certipath-crl.symauth.com/CertiPathLLCCertiPathBridgeCA.crl
http://certipath-crl.symauth.com/CertiPathBridgeCA-G2.crl
http://tscp-crl.symauth.com/tscpbcasha256.crl


##### Australian Defence Organisation #####
http://crl.defence.gov.au/pki/crl/ADIOCA.crl
http://crl.defence.gov.au/pki/crl/ADPRCA.crl
http://crl.defence.gov.au/pki/crl/ADPDCA.crl
http://crl.defence.gov.au/pki/crl/ADPICA.crl


##### Boeing #####
http://crl.boeing.com/crl/Boeing%20PCA%20G3.crl
http://crl.boeing.com/crl/Boeing%20Medium%20Assurance%20Hardware%20Issuing%20CA%20G3.crl


##### Carillon Federal Services #####
http://pub.carillonfedserv.com/CRL/CFSRCA1.crl
http://pub.carillonfedserv.com/CRL/CFSCA1.crl
https://pub.carillonfedserv.com/CRL/CFSCA2.crl


##### Department of State #####
http://crls.pki.state.gov/crls/DoSADPKIRootCA.crl
http://crls.pki.state.gov/crls/DoSADPKIRootCA1.crl
http://crls.pki.state.gov/crls/DoSADPKIPIVCA2.crl
http://crls.pki.state.gov/crls/DoSADPKIPIVCA2-1.crl
http://crls.pki.state.gov/crls/DoSADPKIHACA.crl
http://crls.pki.state.gov/crls/DoSADPKIHACAsha256.crl
http://crls.pki.state.gov/crls/DoSADPKIHACA-1.crl


##### DigiCert Federal SSP #####
http://repo.fpki.gov/fcpca/fcpcag2.crl
http://ssp-crl.symauth.com/SSP/SSPG4.crl
http://onsitecrl.verisign.com/USDepartmentofTransportationFAAPIVG4/LatestCRL.crl
http://ssp-crl.digicert.com/SSP/SSPG5.crl


##### DigiCert NFI #####
http://ssp-crl.verisign.com/universal-root.crl
http://ssp-crl.symauth.com/STNSSP/Class3SSPCAG3.crl
http://onsitecrl.verisign.com/CSCGovernmentSolutionsLLCCSRAFBCADevices/LatestCRL.crl
http://onsitecrl.verisign.com/CSCGovernmentSolutionsLLCCSRAFBCAMedHW/LatestCRL.crl
http://onsitecrl.verisign.com/EiDPassportIncRAPIDGatePIVInteroperableLRA2/LatestCRL.crl
http://onsitecrl.verisign.com/SureIDIncSureIDPIVInteroperable/LatestCRL.crl
http://onsitecrl.verisign.com/USSenateSSPPIVIG4/LatestCRL.crl


##### Entrust Federal SSP #####
http://rootweb.managed.entrust.com/CRLs/EMSRootCA2.crl
http://rootweb.managed.entrust.com/CRLs/EMSRootCA3.crl
http://sspweb.managed.entrust.com/CRLs/EMSSSPCA2.crl
http://sspweb.managed.entrust.com/CRLs/EMSSSPCA3.crl
http://hhspkicrl.managed.entrust.com/CRLs/HHSEntrustCA.crl
http://hhspkicrl.managed.entrust.com/CRLs/HHSEntrustCA1.crl


##### Entrust Managed Services NFI #####
http://nfirootweb.managed.entrust.com/CRLs/NFIRootCA2.crl
http://nfimediumsspweb.managed.entrust.com/CRLs/NFIMEDIUMSSPCA1.crl


##### Exostar LLC #####
http://www.fis.evincible.com/fis/public/ERCA2.crl
http://www.fis.evincible.com/fis/public/ESCA3.crl
http://www.fis.evincible.com/fis/public/ESCA4.crl


##### IdenTrust NFI #####
http://validation.identrust.com/crl/igcrootca1.crl
http://validation.identrust.com/crl/bahpivica01.crl 


##### Lockheed Martin #####
http://crl.external.lmco.com/crl/certupd/Lockheed%20Martin%20Root%20Certification%20Authority%202.crl
http://crl.external.lmco.com/crl/certupd/Lockheed%20Martin%20Certification%20Authority%204%20G2.crl


##### Netherlands Ministry of Defence #####
http://crl.pkioverheid.nl/RootLatestCRL-G3.crl
http://crl.pkioverheid.nl/DomOrganisatiePersoonLatestCRL-G3.crl
http://crls.ca.pkidefensie.nl/mindef-ca-3.crl


##### Northrop Grumman #####
http://certdata.northropgrumman.com/certdata/crls/RevokedByNorthropGrummanCorporateRootCA-G2.crl
http://certdata.northropgrumman.com/certdata/crls/RevokedByNorthropGrummanCorporateSigningCA-G2.crl


##### Raytheon #####
http://pki.raytheon.com/G2/CRLs/Raytheon_Root-G2_Full.crl
http://pki.raytheon.com/G2/CRLs/Raytheon_Class3-G2Full1.crl
http://pki.rtx.com/G3/CRLs/Root-G3_Full.crl
http://pki.rtx.com/G3/CRLs/Class3-G3_Full.crl


##### US Treasury SSP #####
# Note: Some Treasury PKI certificates list "pki.treasury.gov" in place of "pki.treas.gov" - both are aliases for the same site
http://pki.treas.gov/US_Treasury_Root_CA.crl
http://pki.treas.gov/US_Treasury_Root_CA1.crl
https://pki.treas.gov/DHS_CA.crl
http://pki.treas.gov/FS_CA.crl
http://pki.treas.gov/OCIO_CA.crl
https://pki.treas.gov/NASA_Operational_CA.crl
http://pki.treas.gov/SSA_CA.crl
https://pki.treas.gov/VA_CA.crl


##### Verizon/Cybertrust Federal SSP #####
http://repo.fpki.gov/fcpca/fcpcag2.crl
http://cdp1.ssp-strong-id.net/CDP/VZ-SSP-CA-A2.crl
http://crl.pki.va.gov/PKI/CRL/VET-SSP-CA-B1.crl


##### WidePoint Federal SSP #####
http://repo.fpki.gov/fcpca/fcpcag2.crl


##### WidePoint NFI #####
http://crl-server.orc.com/CRLs/ORCROOT2.crl
http://crl-server.orc.com/CRLs/WIDEPOINTNFIROOT2.crl
http://crl-server.orc.com/CRLs/ORCNFI3.crl
http://crl-server.orc.com/CRLs/WIDEPOINTNFI5.crl


######## UNCLASSIFIED ########