Start of change

Basic CRL policy

There are no supported CRLEntry extensions. See step 7 of Basic path validation policy for further information.

The supported CRL extensions for this policy are:

End of change
1.
IndirectCRL extensions will result in CRL validation failing. IndirectCRL extensions must not be used because they cause identified certificates to not be rejected.