Thanks for the quick response! How am I supposed to get the CRL for the other 2 certs in the chain if there is no CRL URI? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287045,287047#msg-287047