diff --git a/federation/xmpp/1/conf/security/java.security b/federation/xmpp/1/conf/security/java.security
index 4b7a999..6ec4c18 100644
--- a/federation/xmpp/1/conf/security/java.security
+++ b/federation/xmpp/1/conf/security/java.security
@@ -1,2 +1,5 @@
 # Enable client-driven OCSP
-ocsp.enable=true
\ No newline at end of file
+ocsp.enable=true
+
+# Enable CRL Distribution Points extension in certificates (download CRL from URL in certificate)
+org.bouncycastle.x509.enableCRLDP=true
\ No newline at end of file
diff --git a/federation/xmpp/2/conf/security/java.security b/federation/xmpp/2/conf/security/java.security
index 4b7a999..6ec4c18 100644
--- a/federation/xmpp/2/conf/security/java.security
+++ b/federation/xmpp/2/conf/security/java.security
@@ -1,2 +1,5 @@
 # Enable client-driven OCSP
-ocsp.enable=true
\ No newline at end of file
+ocsp.enable=true
+
+# Enable CRL Distribution Points extension in certificates (download CRL from URL in certificate)
+org.bouncycastle.x509.enableCRLDP=true
\ No newline at end of file