Your network contains an Active Directory domain named Contoso.com. Contoso.com contains an enterprise certification authority (CA) named CA1. You enable Secure Socket Tunneling Protocol (SSTP) on a server named Server1. A user named User1 attempts to establish an SSTP connection to Server1 and receives the following error message: Error 0x80092013: The revocation function was unable to check revocation because the revocation server was offline. You verify that all certificates services are online. You need to ensure that User1 can connect to Server1 by using SSTP. What should you do first?
A.
Configure a pre-shared key for IPSec on User1s computer.
B.
Publish the certificate revocation list distribution point (CDP) to a location that is accessible from the Internet.
C.
Configure User1 for certificate autoenrollment.
D.
Add a certificate to Server1 that contains server1.contoso.com as a Subject Alternative Name (SAN).
Can anyone explain this for me please
my2cents: to check the certificate a CRL(revocation list) is needed. As example a cert was stolen, admin can mark this as not valid: revoke and this gets published in CRL. And so they suggest to make it visible from internet – over HTTP as example.