|
The following CRL revocation checking options are available:
Mandatory: The certificate is considered valid if all CRLs in a certificate chain can be fetched and no certificate is present on any CRL.
Best effort: The certificate is considered valid if none of the CRLs in a certificate chain that have been fetched indicate that the certificate has been revoked, or if CRL cannot be fetched.
Off: No CRL revocation checking is performed.