You have an enterprise subordinate certification authority （CA）.   You have a group named Group1.   You need to allow members of Group1 to publish new certificate revocation lists. Members of Group1  must not be allowed to revoke certificates.   What should you do（）

• A、Add Group1 to the local Administrators group.
• B、Add Group1 to the Certificate Publishers group.
• C、Assign the Manage CA permission to Group1.
• D、Assign the Issue and Manage Certificates permission to Group1.