Certificate Revocation Lists

Trustpoint lists generated Certificate Revocation Lists under:

PKI > CRLs

This view shows the available CRLs per CA. Each entry contains the CRL number, CA name, update timestamps, status, and the number of revoked certificates.

View CRL details

Select a CRL to open its details. The detail view shows basic CRL information, revoked certificates, and extensions.

Download CRLs

CRLs can be downloaded directly from the list or from the download view.

Supported download formats:

  • PEM

  • DER

  • PKCS#7 PEM

  • PKCS#7 DER

Import CRLs

Use Import CRL to add an externally generated CRL, for example for a keyless CA.

Delete CRLs

Select one or more CRLs and use Delete selected to remove them from Trustpoint.