You need to design your PKI environment to be able to determine if specific issued certificates are no longer being honored by the organization, such as when an employee who had been issued a user certificate quits. Which of the following could you configure to accomplish this? (Choose two. Each answer provides a complete solution.)

A. OCSP B. Autoenrollment C. SCEP D. CDP