[leetrout]

Are there any cert solutions that dont involve having to maintain a revocation list? I only used certs with openvpn years ago and the CRL was a potential footgun.

[goalieca]

This is one reason people are issuing certs with 2 week expiry.