Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 497

A.5.1.2. CRLNumber
A.5.1.2.1. OID
2.5.29.20
A.5.1.2.2. Criticality
This extension must not be critical.
A.5.1.2.3. Discussion
The CRLNumber extension specifies a sequential number for each CRL issued by a CA. It allows
users to easily determine when a particular CRL supersedes another CRL. PKIX requires that all
CRLs have this extension.
A.5.1.2.4. Parameters
Parameter
enable
critical
Table A.5. CRLNumber Configuration Parameters
A.5.1.3. deltaCRLIndicator
A.5.1.3.1. OID
2.5.29.27
A.5.1.3.2. Criticality
PKIX requires that this extension be critical if it exists.
A.5.1.3.3. Discussion
The deltaCRLIndicator extension generates a delta CRL, a list only of certificates that have been
revoked since the last CRL; it also includes a reference to the base URL. This updates the local
database while ignoring unchanged information already in the local database. This can significantly
improve processing time for applications that store revocation information in a format other than the
CRL structure.
A.5.1.3.4. Parameters
Parameter
enable
Extensions for CRLs
475