7.3. Adding a CRL to the OCSP

If a situation arises when a Certificate Manager is unable to publish its CRL to the OCSP, it is possible to add a CRL manually to the OCSP internal database.

To add a CRL to the internal database, do the following:

Open the Certificate Manager's agent services page.
```
https://server.example.com:9443/ca/agent/ca
```
Click on Display Revocation List.
In the results page, select the desired CRL issuing point, select the option to display the CRL as base-64, and click Display.
In the CRL details page, scroll to the Certificate revocation list base64 encoded section, which shows the CRL in base-64 format.

Copy the base-64 encoded CRL, including the -----BEGIN CERTIFICATE REVOCATION LIST----- and -----END CERTIFICATE REVOCATION LIST----- marker lines, to the clipboard or a text file.

The CRL looks similar to the example:

Open the OCSP's agent services page.

https://server.example.com:11443/ocsp/agent/ocsp

In the left frame, click Add Certificate Revocation List.
In the resulting form, paste the encoded CRL inside the Base 64 encoded certificate revocation list (including the header and footer) text area.
Click Add.

The CRL is added to the internal database of the OCSP.