# PKI Certificates

These are the Certification Authorities for this PKI (Public Key Infrastructure) instance:

CA Type | Distinguished Name | Windows format | Linux format | Validity Period | CRL | CRL Validity
--- | --- | --- | --- | --- | --- | ---
Root CA | PKI_ROOT_DN | root-ca.der | root-ca.pem | PKI_ROOT_VALIDITY | root-ca.crl |
Issuing CA | PKI_INT_DN | ca-int.der | ca-int.pem | PKI_INT_VALIDITY |  |

To trust the certificates provided by LabCA, all your client devices should install the root certificate in their Trusted Root Certification Authorities store. You may choose to download the format best suited for your Operating System: DER format for Windows machines or PEM format for Linux/unix machines and Android phones.

The CRL (Certificate Revocation List) is a type of blocklist that includes certificates that should no longer be trusted (have been revoked before their expiration date) and is used by various endpoints, including web browsers. The issuer CRL is refreshed on a regular basis.