Hi, I wanted to validate a digital certificate by checking online CRL by C# code. To do this task, I use, X509Certificate2 and X509Chain class. But, a status saying "RevocationStatusUnknown" is coming as a result. CRL specified in the certificate is accessible via internet explorer on my m/c. Is there any access permissions we need to set @ IIS in order to access CRL?. IIS is running on local m/c here. Could anyone please throw light on this? Thanks In Advance Ajil