This page appears only on login method objects that use certificates. This page allows you to specify container to search to verify the certificate chain. It also allows you to check for revoked certificates.
Certificate Search Container
Click Add to add a container object. This list specifies which container to look in to find intermediate and root certificates so that the certificate chain from the user's certificate to the trusted root certificate can be verified.
Enable CRL Checking
Check this box if you want to check for revoked certificates. The validation code enables checking for revoked certificates using the Certificate Revocation List (CRL) specified in the certificate (if any).