• Google chrome does not utilize CRLs or OCSP , it utilizes CRLSets.
• Google Chrome’s method of checking for revoked certificates.
• A CRLSet is a carefully selected collection of revoked-certificate serial numbers published by many different certificate authorities.
• Google’s own , compiled / curated CRL which is automatically downloaded into chrome browser.
• Lists are auto-updated by regularly crawling the CRLs from the major CAs around the world.

CRLSET EXAMPLE

DOWNSIDE OF CRLSET

1. CRLSet is only composed of a subset of the hundreds of certificate authorities that exist globally.
2. CRLSet is space-constrained to about 24k revoked certificates ( but there are millions of revoked certificates worldwide ).