Control system for a technical installation, in particular a production installation or process installation, and said control system comprises at least one certification body, at least one first installation component (2, 3, 4, 5, 6, 7, 8) and at least one second installation component (2, 3, 4, 5, 6, 7, 8), wherein the certification body is responsible for and embodied for issuing and revoking certificates for at least the first installation component (2, 3, 4, 5, 6, 7, 8) and the second installation component (2, 3, 4, 5, 6, 7, 8), wherein a certificate revocation list service is implemented in the control system and said certificate revocation list service is embodied so as to receive from the certification body a certificate revocation list having certificates that have been revoked by the certification body and so as to provide said certificate revocation list to the installation components (2, 3, 4, 5, 6, 7, 8), and that a certificate revocation list distribution service (17a, 17b, 17c, 17d, 17e) is implemented at least on the first installation component (2, 3, 4, 5, 6, 7, 8) and the second installation component (2, 3, 4, 5, 6, 7, 8) and said certificate revocation list distribution service is embodied so as to receive the certificate revocation list from the certificate revocation list service and to store said certificate revocation list in a storage device of the respective installation component (2, 3, 4, 5, 6, 7, 8), wherein the certificate revocation list distribution service (17a, 17b, 17c, 17d, 17e) of an installation component (2, 3, 4, 5, 6, 7, 8) is furthermore embodied in each case so as to connect to the certificate revocation list distribution service (17a, 17b, 17c, 17d, 17e) on another installation component (2, 3, 4, 5, 6, 7, 8) and to receive the certificate revocation list from this certificate revocation list distribution service on the other component. wherein the certification body is responsible for and embodied for issuing and revoking certificates for at least the first installation component (2, 3, 4, 5, 6, 7, 8) and the second installation component (2, 3, 4, 5, 6, 7, 8), wherein a certificate revocation list service is implemented in the control system and said certificate revocation list service is embodied so as to receive from the certification body a certificate revocation list having certificates that have been revoked by the certification body and so as to provide said certificate revocation list to the installation components (2, 3, 4, 5, 6, 7, 8), and that a certificate revocation list distribution service (17a, 17b, 17c, 17d, 17e) is implemented at least on the first installation component (2, 3, 4, 5, 6, 7, 8) and the second installation component (2, 3, 4, 5, 6, 7, 8) and said certificate revocation list distribution service is embodied so as to receive the certificate revocation list from the certificate revocation list service and to store said certificate revocation list in a storage device of the respective installation component (2, 3, 4, 5, 6, 7, 8), wherein the certificate revocation list distribution service (17a, 17b, 17c, 17d, 17e) of an installation component (2, 3, 4, 5, 6, 7, 8) is furthermore embodied in each case so as to connect to the certificate revocation list distribution service (17a, 17b, 17c, 17d, 17e) on another installation component (2, 3, 4, 5, 6, 7, 8) and to receive the certificate revocation list from this certificate revocation list distribution service on the other component.