Thanks again for the information! So that's typical for a cert to not include the distribution point URIs in the certificate itself? Seems strange to have to contact a certificate authority to find out the CRL distribution point, no? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287045,287049#msg-287049