Can anyone explain to practical use of all the CRL, OCSP, LDAP etc settings in the MDS settings on BES 4.0 / 4.1? Why would you use a Certificate Revocation List? Any examples?

Also, why would you create an MDS keystore file in the server config settings? What would you use it for?

Thanks

CRL, OCSP, LDAP are for S/MIME.
The MDS Keystore can be used to import untrusted certificates. Once imported MDS will consider them to be trusted and not prompt the user.