Control system for a technical installation, in particular a production installation or process installation that comprises at least one certification authority (14, 16) and installation components (2, 3, 4, 5, 6, 7), wherein the certification authority (14, 16) is responsible for issuing and revoking certificates for the installation components (2, 3, 4, 5, 6, 7), and wherein the certification authority (14, 16) is embodied for the purpose of creating a certificate revocation list regarding certificates that are already revoked and said certificate revocation list can be distributed in the control system, and wherein a certificate revocation list service is implemented in the control system and said certificate revocation list service is embodied and provided so as to distribute the certificate revocation list to the installation component (2, 3, 4, 5, 6, 7), and wherein the installation components (2, 3, 4, 5, 6, 7) in each case comprise a local storage device in which it is possible to file the previously distributed certificate revocation list, characterised in that the certificate revocation list service is embodied for the purpose of determining a revocation reason after a certificate is revoked, in particular by drawing on a revocation application or a corresponding user input, and in dependence upon the revocation reason, triggering a removal of a previously distributed certificate revocation list that is stored on the respective local storage device of the installation components (2, 3, 4, 5, 6, 7) and as a consequence after the revocation has been performed initiating a storing of a newly created certificate revocation list in the respective local storage device of the installation components (2, 3, 4, 5, 6, 7). wherein the certification authority (14, 16) is responsible for issuing and revoking certificates for the installation components (2, 3, 4, 5, 6, 7), and wherein the certification authority (14, 16) is embodied for the purpose of creating a certificate revocation list regarding certificates that are already revoked and said certificate revocation list can be distributed in the control system, and wherein a certificate revocation list service is implemented in the control system and said certificate revocation list service is embodied and provided so as to distribute the certificate revocation list to the installation component (2, 3, 4, 5, 6, 7), and wherein the installation components (2, 3, 4, 5, 6, 7) in each case comprise a local storage device in which it is possible to file the previously distributed certificate revocation list, characterised in that the certificate revocation list service is embodied for the purpose of determining a revocation reason after a certificate is revoked, in particular by drawing on a revocation application or a corresponding user input, and in dependence upon the revocation reason, triggering a removal of a previously distributed certificate revocation list that is stored on the respective local storage device of the installation components (2, 3, 4, 5, 6, 7) and as a consequence after the revocation has been performed initiating a storing of a newly created certificate revocation list in the respective local storage device of the installation components (2, 3, 4, 5, 6, 7).