A system and method for retrieving certificate of trust information for a
certificate validation process. Fetching servers periodically retrieve
certificate revocation lists (CRLs) from servers maintained by various
certificate issuers. The revoked certificate data included in the
retrieved CRLs are stored in a central database. An authentication server
receives a request from a client for access to a secure service and
initiates a validation process. The authentication server retrieves
revoked certificate data from the central database and compares the
retrieved revoked certificate data to certificate of trust information
received from the client along with the request. The authentication
server denies access to the secure information if the certificate of
trust information matches revoked certificate data from the central
database, allows access if the certificate of trust information does not
match revoked certificate data from the central database.