You have an enterprise subordinate certification authority （CA）. You have a group named  Group1.     You need to allow members of Group1 to publish new certificate revocation lists. Members of  Group1 must not be allowed to revoke certificates.     What should you do（）

• A、Add Group1 to the local Administrators group.
• B、Add Group1 to the Certificate Publishers group.
• C、Assign the Manage CA permission to Group1.
• D、Assign the Issue and Manage Certificates permission to Group1.