For intermediates, Firefox distributes OneCRL[1] based on CCADB[2] data and the Mozilla Root Program’s own trust decisions. For leaf certificates, they announce

For intermediates, Firefox distributes OneCRL[1] based on CCADB[2] data and the Mozilla Root Program’s own trust decisions. For leaf certificates, they announced the CRLite[3,4] experiment a while ago but it’s not clear how far along it is. [1] https://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/ https://blog.mozilla.org/security/2015/03/03/revoking-interm... [2] https://www.ccadb.org/ https://www.ccadb.org/ [3] https://blog.mozilla.org/security/2020/01/09/crlite-part-1-all-web-pki-revocations-compressed/ https://blog.mozilla.org/security/2020/01/09/crlite-part-1-a... [4] https://bugzilla.mozilla.org/show_bug.cgi?id=crlite https://bugzilla.mozilla.org/show_bug.cgi?id=crlite