Crl Tip

Optionally, the credential may include a certificate revocation list (CRL) using the key ca.crl. If so, add another argument to the above example to provide the CRL: --from-file=ca.crl=/some/path/to/your-crl.pem.