--- title: 'BAT file for updating the list of CRL certificates' url: 'https://ra1ahq.blog/en/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov' markdown: 'https://ra1ahq.blog/en/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov.md' lang: en date: '2024-01-16' description: 'Under Windows, when the certificate revocation list becomes outdated when checking electronic signatures in "CryptoARM 5" there may be a warning that the CRL is not up to date, so I came up with a solution. Introduction CRL- lists of early revoked certificates of electronic digital signatures are maintained by certification centers. CRL stands f' taxonomy: category: - blog tag: - windows archives_month: - jan_2024 archives_year: - '2024' --- # BAT file for updating the list of CRL certificates 16 January 2024 10:58 ### BAT file for updating the list of CRL certificates [windows](https://ra1ahq.blog/en/tag:windows) 16 January 2024 10:58 Under Windows, when the certificate revocation list becomes outdated when checking electronic signatures in "[CryptoARM 5](https://trusted.ru/support/downloads/)" there may be a warning that the CRL is not up to date, so I came up with a solution. ### Introduction **CRL**- lists of early revoked certificates of electronic digital signatures are maintained by certification centers. CRL stands for Certificate Revocation List. A certificate revocation list is a required part of the PKI (trusted key encryption) infrastructure because... there could be an early replacement of the electronic signature key due to its breakdown or compromise (for example, loss), or the death of the owner. Revocation of the certificate will not allow attackers to use the digital signature. The CRL needs to be updated fairly frequently - I set the scheduler to run the update every morning. Because only with an up-to-date CRL list is protection against stolen or lost or blocked foreign keys effective. **CRLs:** - registry reestr-pki.ru - "Rostelecom" rostelecom.ru and company.rt.ru The task is to download the file from one of these sites and import it into the certificate group **"Recalled"**. Managing certificates using the graphical interface (mmc.exe - “Certificates” snap-in) is not convenient, because requires user participation. The BAT file is run by the task scheduler in the morning. ### What you need to run the BAT file: 1\) The batch file can work on operating systems: *Windows 7 SP1* Windows 10 version 1507 or higher \*Windows 11 - Windows Server 2022, Windows Server 2019, Windows Server 2016, and Windows Server 2012 R2. 2\) installed free utility **Gnu Wget for Windows**- version [wget-1.11.4-1-setup.exe](https://gnuwin32.sourceforge.net/packages/wget.htm) or another. Gnu Wget can be downloaded from SourceForge -[Gnu Wget for Windows](https://sourceforge.net/projects/gnuwin32/files/wget/1.11.4-1/) 3\) command line program **CertMgr.exe** from the package [Windows SDK](https://learn.microsoft.com/ru-ru/windows/apps/windows-app-sdk/downloads). For ease of launch, I copied the CertMgr.exe utility to the folder where the \*.BAT batch file is located. ### Preparation I created a folder on my hard drive **C:\\CRL**(the name can be anything, you need to correct the text of the BAT file) in which you placed a text command file and next to it placed the CertMgr.exe program from the Windows SDK package. Next to the BAT file there are three lists with URLs for certificate revocation lists - list1.txt, list2.txt and list3.txt ### Contents of the text BAT command file for updating the CRL `@echo off`for /f %%G in (list1.txt) DO call :s\_subroutine %%Ggoto :EOF:s\_subroutine echo Start: %1 "C:\\Program Files (x86)\\Wget\\bin\\wget.exe" %1 --output-document c:\\crl\\temp.crl c:\\crl\\CertMgr.exe /add c:\\crl\\temp.crl /s CA echo Finish! echo: echo: del c:\\crl\\temp.crl goto :EOFThe for loop specifies an input file with a list of certificates: list1.txt) I have three versions of the file - list1.txt, list2.txt and list3.txt ### Files with lists of URLs of revoked CRL certificates Contents **list1.txt**: ``` http://reestr-pki.ru/cdp/guc.crl http://reestr-pki.ru/cdp/guc_gost12.crl http://reestr-pki.ru/cdp/vguc1_3.crl http://reestr-pki.ru/cdp/vguc1_4.crl http://reestr-pki.ru/cdp/vguc1_5.crl ``` Contents **list2.txt**: ``` http://rostelecom.ru/cdp/guc.crl http://rostelecom.ru/cdp/guc_gost12.crl http://rostelecom.ru/cdp/vguc1_3.crl http://rostelecom.ru/cdp/vguc1_4.crl http://rostelecom.ru/cdp/vguc1_5.crl ``` Contents **list3.txt**: ``` http://company.rt.ru/cdp/guc.crl http://company.rt.ru/cdp/guc_gost12.crl http://company.rt.ru/cdp/vguc1_3.crl http://company.rt.ru/cdp/vguc1_4.crl http://company.rt.ru/cdp/vguc1_5.crl ``` ### Where can I get CertMgr.exe? Certificate Manager is installed with the package **SDK for Windows 10**. The executable file is located in Windows 10 along the path **%ProgramFiles(x86)%\\Windows Kits\\10\\bin\\10.0.version\_SDK.0\\arm64\\certmgr.exe.** SDK download pages: 1. 1.[Windows SDK download page](https://learn.microsoft.com/ru-ru/windows/apps/windows-app-sdk/downloads) 2. 2.[Windows SDK (10.0.22621) for Windows 11, version 22H2](https://developer.microsoft.com/en-us/windows/downloads/windows-sdk/) ### CertMgr Documentation \*[Certmgr.exe (Certificate Manager Tool)](https://learn.microsoft.com/ru-ru/dotnet/framework/tools/certmgr-exe-certificate-manager-tool) ### Related publications [ ![](https://ra1ahq.blog/images/0/e/1/d/8/0e1d887fa4329af3c18b34b322d6b93723ec8262-hasp.png) Script for restarting a service in MS Windows ](https://ra1ahq.blog/en/skript-dlya-perezapuska-sluzhby-v-ms-windows) [ ![](https://ra1ahq.blog/images/f/8/5/e/c/f85ec594bbc8539d5886856f0801228636f471e1-ramdisk2.png) Use of RAMdisk to accelerate 1C ](https://ra1ahq.blog/en/ispolzovanie-ramdisk-dlya-uskoreniya-1c) [ ![](https://ra1ahq.blog/images/d/4/0/7/9/d40790899279a464b13afdf686327a0e202d054b-roots.png) Updating root certificates on a PC in Windows OS ](https://ra1ahq.blog/en/obnovlenie-kornevykh-sertifikatov-na-pk-v-os-windows) [ ![](https://ra1ahq.blog/images/7/f/2/d/c/7f2dced64ca4aaa83fffb8506e91d6ea51adda4d-ms.webp) Disable news feed in Windows 10 ](https://ra1ahq.blog/en/otklyuchenie-fida-novostei-v-windows-10) [ ![](https://ra1ahq.blog/images/7/c/f/5/9/7cf59a6e725768c57da27069963f8b86b2f4f46d-kmeleon.png) Lightweight Internet Browsers ](https://ra1ahq.blog/en/internet-browsers-lite) [ Backward](https://ra1ahq.blog/en/perekhod-na-rossiiskie-kornevye-sertifikaty-tls "Previuous page") [ Forward ](https://ra1ahq.blog/en/bezzakoniya-i-grekhi-v-chyom-ikh-otlichie "Next page") ## Languages - [Русский](https://ra1ahq.blog/posts/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov) - [English](https://ra1ahq.blog/en/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov) - [Deutsch](https://ra1ahq.blog/de/posts/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov) - [Français](https://ra1ahq.blog/fr/posts/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov) - [中文 (简体) (cn)](https://ra1ahq.blog/zh-cn/posts/bat-fail-dlya-obnovleniya-spiska-crl-sertifikatov) ## Theme ## RSS feeds [ Atom 1.0](https://ra1ahq.blog/en/.atom) [ RSS](https://ra1ahq.blog/en/.rss) ## Popular tags [APRS](https://ra1ahq.blog/en/tag:APRS) [CW](https://ra1ahq.blog/en/tag:CW) [DX](https://ra1ahq.blog/en/tag:DX) [FM](https://ra1ahq.blog/en/tag:FM) [Linux](https://ra1ahq.blog/en/tag:Linux) [VHF](https://ra1ahq.blog/en/tag:VHF) [antennas](https://ra1ahq.blog/en/tag:antennas) [firefox](https://ra1ahq.blog/en/tag:firefox) [morse](https://ra1ahq.blog/en/tag:morse) [soundtrack](https://ra1ahq.blog/en/tag:soundtrack) [video](https://ra1ahq.blog/en/tag:video) [windows](https://ra1ahq.blog/en/tag:windows) [youtube](https://ra1ahq.blog/en/tag:youtube) [КВ](https://ra1ahq.blog/en/tag:%D0%9A%D0%92) [ТВ](https://ra1ahq.blog/en/tag:%D0%A2%D0%92) [УКВ](https://ra1ahq.blog/en/tag:%D0%A3%D0%9A%D0%92) [антенны](https://ra1ahq.blog/en/tag:%D0%B0%D0%BD%D1%82%D0%B5%D0%BD%D0%BD%D1%8B) [безопасность](https://ra1ahq.blog/en/tag:%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D1%8C) [длинные волны](https://ra1ahq.blog/en/tag:%D0%B4%D0%BB%D0%B8%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%B2%D0%BE%D0%BB%D0%BD%D1%8B) [путешествия](https://ra1ahq.blog/en/tag:%D0%BF%D1%83%D1%82%D0%B5%D1%88%D0%B5%D1%81%D1%82%D0%B2%D0%B8%D1%8F) [религия](https://ra1ahq.blog/en/tag:%D1%80%D0%B5%D0%BB%D0%B8%D0%B3%D0%B8%D1%8F) [соревнования](https://ra1ahq.blog/en/tag:%D1%81%D0%BE%D1%80%D0%B5%D0%B2%D0%BD%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F) [спутники](https://ra1ahq.blog/en/tag:%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%B8) [средние волны](https://ra1ahq.blog/en/tag:%D1%81%D1%80%D0%B5%D0%B4%D0%BD%D0%B8%D0%B5%20%D0%B2%D0%BE%D0%BB%D0%BD%D1%8B) [схемы](https://ra1ahq.blog/en/tag:%D1%81%D1%85%D0%B5%D0%BC%D1%8B) [тесты](https://ra1ahq.blog/en/tag:%D1%82%D0%B5%D1%81%D1%82%D1%8B) [трансивер](https://ra1ahq.blog/en/tag:%D1%82%D1%80%D0%B0%D0%BD%D1%81%D0%B8%D0%B2%D0%B5%D1%80) [управление](https://ra1ahq.blog/en/tag:%D1%83%D0%BF%D1%80%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5) [фотографии](https://ra1ahq.blog/en/tag:%D1%84%D0%BE%D1%82%D0%BE%D0%B3%D1%80%D0%B0%D1%84%D0%B8%D0%B8) ## Random post [ I'll be lucky!](https://ra1ahq.blog/en/random) ## Archive of posts - [ October 2026 ✒ 4 ](https://ra1ahq.blog/en/archives_month:oct_2026) - [ September 2026 ✒ 9 ](https://ra1ahq.blog/en/archives_month:sep_2026) - [ August 2026 ✒ 6 ](https://ra1ahq.blog/en/archives_month:aug_2026) - [ July 2026 ✒ 13 ](https://ra1ahq.blog/en/archives_month:jul_2026) - [ June 2026 ✒ 8 ](https://ra1ahq.blog/en/archives_month:jun_2026) - [ May 2026 ✒ 2 ](https://ra1ahq.blog/en/archives_month:may_2026) - [ April 2026 ✒ 6 ](https://ra1ahq.blog/en/archives_month:apr_2026) - [ March 2026 ✒ 3 ](https://ra1ahq.blog/en/archives_month:mar_2026) - [ February 2026 ✒ 7 ](https://ra1ahq.blog/en/archives_month:feb_2026) - [ January 2026 ✒ 8 ](https://ra1ahq.blog/en/archives_month:jan_2026) - [ December 2025 ✒ 12 ](https://ra1ahq.blog/en/archives_month:dec_2025) - [ November 2025 ✒ 9 ](https://ra1ahq.blog/en/archives_month:nov_2025) - [ October 2025 ✒ 8 ](https://ra1ahq.blog/en/archives_month:oct_2025) - [ September 2025 ✒ 5 ](https://ra1ahq.blog/en/archives_month:sep_2025) - [ August 2025 ✒ 8 ](https://ra1ahq.blog/en/archives_month:aug_2025) - [ July 2025 ✒ 6 ](https://ra1ahq.blog/en/archives_month:jul_2025) - [ June 2025 ✒ 10 ](https://ra1ahq.blog/en/archives_month:jun_2025) - [ May 2025 ✒ 4 ](https://ra1ahq.blog/en/archives_month:may_2025) - [ April 2025 ✒ 4 ](https://ra1ahq.blog/en/archives_month:apr_2025) - [ March 2025 ✒ 4 ](https://ra1ahq.blog/en/archives_month:mar_2025) - [ February 2025 ✒ 11 ](https://ra1ahq.blog/en/archives_month:feb_2025) - [ December 2024 ✒ 8 ](https://ra1ahq.blog/en/archives_month:dec_2024) - [ November 2024 ✒ 2 ](https://ra1ahq.blog/en/archives_month:nov_2024) - [ October 2024 ✒ 8 ](https://ra1ahq.blog/en/archives_month:oct_2024) - [ September 2024 ✒ 3 ](https://ra1ahq.blog/en/archives_month:sep_2024) - [ August 2024 ✒ 5 ](https://ra1ahq.blog/en/archives_month:aug_2024) - [ July 2024 ✒ 9 ](https://ra1ahq.blog/en/archives_month:jul_2024) - [ June 2024 ✒ 6 ](https://ra1ahq.blog/en/archives_month:jun_2024) - [ May 2024 ✒ 7 ](https://ra1ahq.blog/en/archives_month:may_2024) - [ April 2024 ✒ 5 ](https://ra1ahq.blog/en/archives_month:apr_2024) - [ March 2024 ✒ 5 ](https://ra1ahq.blog/en/archives_month:mar_2024) - [ February 2024 ✒ 5 ](https://ra1ahq.blog/en/archives_month:feb_2024) - [ January 2024 ✒ 6 ](https://ra1ahq.blog/en/archives_month:jan_2024) - [ December 2023 ✒ 7 ](https://ra1ahq.blog/en/archives_month:dec_2023) - [ November 2023 ✒ 4 ](https://ra1ahq.blog/en/archives_month:nov_2023) - [ October 2023 ✒ 8 ](https://ra1ahq.blog/en/archives_month:oct_2023) - [ September 2023 ✒ 7 ](https://ra1ahq.blog/en/archives_month:sep_2023) - [ August 2023 ✒ 4 ](https://ra1ahq.blog/en/archives_month:aug_2023) - [ July 2023 ✒ 7 ](https://ra1ahq.blog/en/archives_month:jul_2023) - [ June 2023 ✒ 7 ](https://ra1ahq.blog/en/archives_month:jun_2023) - [ May 2023 ✒ 5 ](https://ra1ahq.blog/en/archives_month:may_2023) - [ April 2023 ✒ 6 ](https://ra1ahq.blog/en/archives_month:apr_2023) - [ March 2023 ✒ 5 ](https://ra1ahq.blog/en/archives_month:mar_2023) - [ February 2023 ✒ 2 ](https://ra1ahq.blog/en/archives_month:feb_2023) - [ January 2023 ✒ 5 ](https://ra1ahq.blog/en/archives_month:jan_2023) - [ December 2022 ✒ 7 ](https://ra1ahq.blog/en/archives_month:dec_2022) - [ November 2022 ✒ 8 ](https://ra1ahq.blog/en/archives_month:nov_2022) - [ October 2022 ✒ 6 ](https://ra1ahq.blog/en/archives_month:oct_2022) - [ September 2022 ✒ 9 ](https://ra1ahq.blog/en/archives_month:sep_2022) - [ August 2022 ✒ 8 ](https://ra1ahq.blog/en/archives_month:aug_2022) - [ July 2022 ✒ 4 ](https://ra1ahq.blog/en/archives_month:jul_2022) - [ June 2022 ✒ 9 ](https://ra1ahq.blog/en/archives_month:jun_2022) - [ May 2022 ✒ 7 ](https://ra1ahq.blog/en/archives_month:may_2022) - [ April 2022 ✒ 3 ](https://ra1ahq.blog/en/archives_month:apr_2022) - [ March 2022 ✒ 4 ](https://ra1ahq.blog/en/archives_month:mar_2022) - [ February 2022 ✒ 6 ](https://ra1ahq.blog/en/archives_month:feb_2022) - [ January 2022 ✒ 7 ](https://ra1ahq.blog/en/archives_month:jan_2022) - [ December 2021 ✒ 7 ](https://ra1ahq.blog/en/archives_month:dec_2021) - [ November 2021 ✒ 7 ](https://ra1ahq.blog/en/archives_month:nov_2021) - [ October 2021 ✒ 7 ](https://ra1ahq.blog/en/archives_month:oct_2021) - [ September 2021 ✒ 10 ](https://ra1ahq.blog/en/archives_month:sep_2021) - [ August 2021 ✒ 6 ](https://ra1ahq.blog/en/archives_month:aug_2021) - [ July 2021 ✒ 7 ](https://ra1ahq.blog/en/archives_month:jul_2021) - [ June 2021 ✒ 7 ](https://ra1ahq.blog/en/archives_month:jun_2021) - [ May 2021 ✒ 7 ](https://ra1ahq.blog/en/archives_month:may_2021) - [ April 2021 ✒ 4 ](https://ra1ahq.blog/en/archives_month:apr_2021) - [ March 2021 ✒ 4 ](https://ra1ahq.blog/en/archives_month:mar_2021) - [ February 2021 ✒ 3 ](https://ra1ahq.blog/en/archives_month:feb_2021) - [ January 2021 ✒ 4 ](https://ra1ahq.blog/en/archives_month:jan_2021) - [ December 2020 ✒ 8 ](https://ra1ahq.blog/en/archives_month:dec_2020) - [ November 2020 ✒ 2 ](https://ra1ahq.blog/en/archives_month:nov_2020) - [ October 2020 ✒ 3 ](https://ra1ahq.blog/en/archives_month:oct_2020) - [ September 2020 ✒ 3 ](https://ra1ahq.blog/en/archives_month:sep_2020) - [ August 2020 ✒ 5 ](https://ra1ahq.blog/en/archives_month:aug_2020) - [ July 2020 ✒ 5 ](https://ra1ahq.blog/en/archives_month:jul_2020) - [ June 2020 ✒ 8 ](https://ra1ahq.blog/en/archives_month:jun_2020) - [ May 2020 ✒ 10 ](https://ra1ahq.blog/en/archives_month:may_2020) - [ April 2020 ✒ 4 ](https://ra1ahq.blog/en/archives_month:apr_2020) - [ March 2020 ✒ 2 ](https://ra1ahq.blog/en/archives_month:mar_2020) - [ January 2020 ✒ 1 ](https://ra1ahq.blog/en/archives_month:jan_2020) - [ December 2019 ✒ 2 ](https://ra1ahq.blog/en/archives_month:dec_2019) ## Search ## Weather forecast [На 14 дней](https://world-weather.ru/pogoda/russia/saint_petersburg/14days/) [world-weather.ru](https://world-weather.ru/) --- ## Navigation - Parent: [RA1AHQ](https://ra1ahq.blog/en/index.md) - Previous: [Iniquity and sins - what is their difference?](https://ra1ahq.blog/en/bezzakoniya-i-grekhi-v-chyom-ikh-otlichie.md) - Next: [Transition to Russian TLS root certificates](https://ra1ahq.blog/en/perekhod-na-rossiiskie-kornevye-sertifikaty-tls.md)