Comment Re:Private Certificate Authority (Score 2, Informative) 286
Why do you assume it has to be manually distributed? CRL and Certificates could be distributed through any enterprise desktop management system, such as SCCM or remediation managers such as Hercules.