CRL Endpoints
Understand how SecuriTLS generates, updates, publishes, and deploys certificate revocation lists.
CRL publishing
SecuriTLS updates CA CRL files as long as the CA has not been renewed, rekeyed, or reissued. After a CA is created, and every 10 seconds thereafter, SecuriTLS checks for revocations and issues a new CRL file when needed.
CRL number updates
Each CRL update increments the CRL number. If no revocations occur within a 24 hour period, a new CRL file is still generated.
Distribution point
Intermediate and Leaf certificates can include an X509v3 CRL Distribution Point such as:
/crl/<CRL FILENAME>Device deployment options
When deploying to devices you can choose no CRL deployment, a bundled CRL file containing multiple CA CRLs, or a directory layout with one CRL per CA.