When the ca USES a self-signed certificate, called a Root ca, the ca usually publishes its self-signed certificate details publicly so that users can establish the authenticity of the ca.
当CA使用自签名证书时(称为根ca)，该ca通常公开发布其自签名证书详细信息，因此用户可以确定该CA的真实性。
If the trusted root ca has a CRL provided check that the certificate is not listed there as being revoked.
如果可信根ca提供CRL，要确认撤消的证书列表中不包含这个证书。
If for some reason they are not placed in there trust cannot be established although Windows may show the certificate as a trusted root ca.
如果由于某种原因它们没有放在那里，即使Windows把证书显示为可信根ca，也无法建立信任。
应用推荐