Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)