Abstract: At present，the main solution scheme in public key infrastructure of certificate revocation problem is to use X.509 certificate revocation list.The existing methods have some problems such that peak load on CRL repository is too heavy to deploy a large-scale PKI with reasonable cost.By analyzing Over-Issued CRL model and P2P network，an approach to distribute CRL is given based on the above models.It combines the advantages of above two models，reduces the peak load of CRL repository effectively.