How are updates made to the cache of root certificates that is used for certificate verification purposes and maintained by Palo Alto Networks?

A. The administrator reviews certificate status and replaces them manually.

B. The firewall automatically updates the certificates as it updates the associated CRL list.

C. The administrator installs PAN-OS software and dynamic content updates.

D. The firewall automatically installs new certificates using OCSP.