tokens: ['Only', 'in', 'those', 'cases', 'having', 'interoperator', 'operations', 'the', 'protocols', 'are', 'an', 'issue', 'These', 'include', 'FTP', 'HTTP', 'and', 'LDAP', 'for', 'repository', 'access', 'OCSP', '', 'for', 'certificate', 'status', 'checking', 'and', 'CMP', '', 'or', 'CMC', '', 'for', 'certificate', 'life', 'cycle', 'management', 'End', 'entities', 'EEs', 'need', 'to', 'be', 'able', 'to', 'fetch', 'CRLs', 'in', 'order', 'to', 'check', 'the', 'certificate', 'status', 'from', 'a', 'PKI', 'repository', 'Also', 'in', 'the', 'case', 'of', 'multilevel', 'CA', 'hierarchies', 'and', 'crosscertification', 'EEs', 'might', 'need', 'to', 'fetch', 'the', 'certificates', 'between', 'the', 'other', 'party', 'and', 'the', 'trusted', 'CA', 'in', 'the', 'certificate', 'path', 'the', 'EE', 'certificate', 'itself', 'should', 'be', 'sent', 'in', 'the', 'IKE', 'payload', 'Both', 'LDAP', 'Lightweight', 'Directory', 'Access', 'Protocol', 'and', 'HTTP', 'should', 'be', 'supported', 'for', 'fetching', 'CRLs', 'from', 'a', 'repository', 'HTTP', 'is', 'very', 'widely', 'used', 'easy', 'to', 'implement', 'and', 'often', 'used', 'to', 'fetch', 'CRLs', 'However', 'LDAP', 'is', 'more', 'suitable', 'for', 'fetching', 'other', 'objects', 'as', 'CRLs', 'CRL', 'distribution', 'point', 'in', 'the', 'EE', 'certificate', 'or', 'subCA', 'certificate', 'should', 'point', 'to', 'the', 'CRL', 'issued', 'by', 'the', 'CA', 'LDAP', 'should', 'be', 'the', 'supported']