- Google chrome does not utilize CRLs or OCSP , it utilizes CRLSets.
- Google Chrome’s method of checking for revoked certificates.
- A CRLSet is a carefully selected collection of revoked-certificate serial numbers published by many different certificate authorities.
- Google’s own , compiled / curated CRL which is automatically downloaded into chrome browser.
- Lists are auto-updated by regularly crawling the CRLs from the major CAs around the world.
CRLSET EXAMPLE

DOWNSIDE OF CRLSET
- CRLSet is only composed of a subset of the hundreds of certificate authorities that exist globally.
- CRLSet is space-constrained to about 24k revoked certificates ( but there are millions of revoked certificates worldwide ).