A systems administrator has implemented PKI on a classified government network. In the
event that a disconnect occurs from the primary CA, which of the following should be accessible
locally from every site to ensure users with bad certificates cannot gain access to the network?