Final answer:
An X.509 certificate revocation list (CRL) contains a list of revoked serial numbers.
Step-by-step explanation:
An X.509 certificate revocation list (CRL) is used to identify certificates that have been revoked by the issuer before their expiration date. It contains a list of revoked serial numbers, not the certificates themselves. Therefore, the correct answer is A) serial numbers.