Current versions of Firefox also do not use CRL, if I understand correctly. It seems most modern browsers prefer OCSP instead, with CRL only as a fallback or n

Current versions of Firefox also do not use CRL, if I understand correctly. It seems most modern browsers prefer OCSP instead, with CRL only as a fallback or not at all. You can find some of the rationale at these links: https://mail.mozilla.org/pipermail/firefox-dev/2013-April/000329.html https://mail.mozilla.org/pipermail/firefox-dev/2013-April/00... https://mail.mozilla.org/pipermail/firefox-dev/2013-May/000334.html https://mail.mozilla.org/pipermail/firefox-dev/2013-May/0003... https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol https://en.wikipedia.org/wiki/Online_Certificate_Status_Prot... https://wiki.mozilla.org/CA:ImprovingRevocation https://wiki.mozilla.org/CA:ImprovingRevocation