CLIENT CA SERVER GetCRL: PKI CRL query message ----------------------------------> CertRep: CRL attached <----------------------------- Receive the CRL