The Certificate Manager uses its CA signing key to sign CRLs. To use a separate signing key pair for CRLs, set up a CRL signing key and change the Certificate Manager configuration to use this key to sign CRLs.

This is illustrated with a random graphic, "Figure 2.1, “American Beauty Rose”."