@yuka CRL:s are rarely implemented (at least in IoT devices), but there are multitude of ways to stop CRL updates. Simplest would be the make the CRL hostname resolve to 127.0.0.1 or NXDOMAIN, or use iptables to block the traffic.