Control ID: CA-CONFIG-004
Control Name: CA CRL Distribution Points
Severity: High
Status: Success
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:42:38
Duration: 00:00:00.9729719

Expected Result:
Successful retrieval of CA CRL Distribution Points configuration using Get-CACRLDistributionPoint

Evidence:


PublishToServer      : True
PublishDeltaToServer : True
AddToCertificateCdp  : False
AddToFreshestCrl     : False
AddToCrlCdp          : False
AddToCrlIdp          : False
Uri                  : C:\WINDOWS\system32\CertSrv\CertEnroll\<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl

PublishToServer      : True
PublishDeltaToServer : True
AddToCertificateCdp  : True
AddToFreshestCrl     : True
AddToCrlCdp          : True
AddToCrlIdp          : False
Uri                  : ldap:///CN=<CATruncatedName><CRLNameSuffix>,CN=<ServerShortName>,CN=CDP,CN=Public Key 
                       Services,CN=Services,<ConfigurationContainer><CDPObjectClass>

PublishToServer      : False
PublishDeltaToServer : False
AddToCertificateCdp  : False
AddToFreshestCrl     : False
AddToCrlCdp          : False
AddToCrlIdp          : False
Uri                  : http://<ServerDNSName>/CertEnroll/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl

PublishToServer      : False
PublishDeltaToServer : False
AddToCertificateCdp  : False
AddToFreshestCrl     : False
AddToCrlCdp          : False
AddToCrlIdp          : False
Uri                  : file://<ServerDNSName>/CertEnroll/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl

PublishToServer      : False
PublishDeltaToServer : False
AddToCertificateCdp  : True
AddToFreshestCrl     : True
AddToCrlCdp          : False
AddToCrlIdp          : True
Uri                  : http://web.securetron-lab.local/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl

PublishToServer      : False
PublishDeltaToServer : False
AddToCertificateCdp  : True
AddToFreshestCrl     : True
AddToCrlCdp          : False
AddToCrlIdp          : True
Uri                  : http://localhost/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl

PublishToServer      : False
PublishDeltaToServer : False
AddToCertificateCdp  : True
AddToFreshestCrl     : True
AddToCrlCdp          : False
AddToCrlIdp          : True
Uri                  : http://192.168.205.128/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl





Recommendation:
CRL Distribution Points configuration retrieved successfully. Review the output for any configuration issues.
