A systems owner reviews permissions granted to a targeted team of employees and determines that some of the employees' accesses are outside their scope of work. After revoking the certificates, what log does the owner use to record the changes?

A$.$ Public Key Infrastructure $($PKI$)$

B$.$ Certificate Revocation Lists $($CRL$)$

C$.$ Trusted Platform Module $($TPM$)$

D$.$ Hardware Security Module $($HSM$)$