Kerberos uses a KDC (key distribution center) to centralize the distribution of certificate keys and keep a list of revoked keys.