Which two options could a NetScaler Engineer configure to ensure that a revoked client certificate CANNOT be used for a client certificate authentication? (Choose two.)
A. Server Name Indication (SNI)
B. Certificate Revocation List (CRL)
C. Certificate Signing Request (CSR)
D. Online Certification Status Protocol (OCSP)