Clients may not be able to locate a CRL to check the revocation status of a certificate, and certificate validation may fail. ...