List of certificates revoked before expiration, published by the CA. Clients check CRLs to verify certificate validity. Being replaced by OCSP.