Optional URL for fetching a Certificate Revocation List (CRL) for the Document Signing Certificate. If null (default), CRL checking is skipped. If set but unreachable, the session continues and the skip is recorded in telemetry.