A non-transitory computer readable medium storing computer executable instructions that, when loaded into computer memory and executed by a processor of a computing device, cause the computing device to:
- generate over a first period of time, using one or more computing devices associated with a certificate authority (CA), a first plurality of digital certificates, wherein each of the first plurality of digital certificates includes a first certificate revocation list (CRL) address, wherein the first CRL address indicates a location of a first CRL, and wherein the first CRL is configured to include a first list of revoked digital certificates that identifies one or more of the first plurality of digital certificates;
- determine, using the one or more computing devices, to stop generating digital certificates that include the first CRL address based at least in part on a second period of time identified by a threshold period of time, wherein the threshold period of time is a variable parameter based at least in part on a certificate issuance rate of the CA, wherein the first CRL is active for assignment of digital certificates during the first period of time and inactive for assignment of digital certificates during other periods of time;
- based on the determining to stop generating digital certificates that include the first CRL address, generate over a third period of time that is different from the first period of time, using the one or more computing devices, a second plurality of digital certificates, wherein each of the second plurality of digital certificates includes a second CRL address, wherein the second CRL address indicates a location of a second CRL, wherein the second CRL is configured to include a second list of revoked digital certificates that identifies one or more of the second plurality of digital certificates;
- and
- determine, using the one or more computing devices, to stop generating digital certificates that include the second CRL address based at least in part on a fourth period of time identified by the threshold period of time, wherein the fourth period of time is different from the second period of time, wherein the second CRL is active for assignment of digital certificates during the third period of time and inactive for assignment of digital certificates during other periods of time, wherein the first CRL and the second CRL are active for assignment of digital certificates during time periods of different lengths,
- wherein in response to revocation of a first digital certificate of the first plurality of digital certificates, an indication of the first digital certificate is added to the first list of revoked digital certificates based at least in part on a time at which the first digital certificate was generated, and
- wherein in response to revocation of a second digital certificate of the second plurality of digital certificates, an indication of the second digital certificate is added to the second list of revoked digital certificates based at least in part on a time at which the second digital certificate was generated.