"Stephen Bowman" <stephenbb at gmail.com> wrote: > What determines the expire time of a CRL? No idea... it's an OpenSSL thing. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog