Configuring CRL Checking For the Entire Certificate Chain
To enable CRL checking for the entire certificate chain, set the check-crl-all configuration parameter in the Software AG_directory\Broker\data\awbrokersversion\default\awbroker.cfg file as shown below:
check-crl-all=1
By default, the CRL checking is not done for the entire certificate chain.