I am working on a new PKI infrastructure and was wondering how you guys have ordered your CRL urls. If i have external clients connecting to our network is it wise to move the externally accessible ...

We've got a offline root and issuing CA that are still running Sha1 for hashing. They're really only being used for user tokens for authentication so the SHA1 isn't a huge thing. However now I need to ...