# Enable client-driven OCSP
ocsp.enable=true
# Enable CRL Distribution Points extension in certificates (download CRL from URL in certificate)
org.bouncycastle.x509.enableCRLDP=true