java,certificate,x509certificate,certificate-revocation
If you want to rely on your CRL, you have to keep the CRL up to date. I do not recomment this. When to update the CRL? CRLs may contain an expiration date, in which case you need to download the "newer-released" CRL after that date. (sometimes CA publish...