Certificate Authority Creation

A CA can be created within and managed by OTPKI with this form. First a key and certificate profile appropriate for this CA will need to be created first. See Keys and Certificate Profiles for more info.

CA's also control CRL generation and those settings are found here as well. See CRLs for more info.
The CA has the option to explicitly define the CDP (CRL Distribution Point) URIs as well as the OCSP URIs. In the Certificate profile, a user can force the use of the CA-defined values in their extensions, or they can be overridden and statically defined directly from the profile.