Partitioning certificate revocation lists

A computer implemented method for managing certificate revocation list (CRL) size by distributing multiple certificates issued by a single certificate authority (CA) across different ones of a plurality of separate CRLs, the method comprising:

• creating, by a computer, multiple CRLs across which certificates issued by the CA are distributed;
• assigning, by the computer, each certificate issued by the CA to a specific one of the multiple CRLs;
• for each specific certificate issued by the CA, writing, by the computer, an address of the specific one of the multiple CRLs to which the specific issued certificate is assigned to the specific certificate, wherein an authenticating application has access to the specific one of the multiple CRLs through the written address in the specific certificate;
• revoking, by the CA, a specific one of the issued certificates;
• determining, by the CA, to which specific one of the multiple CRLs the revoked certificate is assigned;
• and
• updating, by the CA, the specific CRL to which the revoked certificate is assigned to indicate that the certificate is revoked.