Question: how does crl checking work?
Answer: A GET request is made to an HTTPS-enabled page. The certificate authority receives that request and returns a list of all revoked certificates. The browser then parses the CRL to ensure that the certificate of the requested site isn't contained within it.