Which role allows FortiAuthenticator to receive the signed certificate signing requests (CSRs) and send certificate revocation lists (CRLs)?

FortiAuthenticator has several roles that involve digital certificates.

Which role allows FortiAuthenticator to receive the signed certificate signing requests (CSRs) and send certificate revocation lists (CRLs)?
A . Remote LDAP server
B . EAP server
C . SCEP server
D . OCSP server

Answer: C