Function build_mitm_ca_crl 

pub fn build_mitm_ca_crl(
    ca_cert: &X509Ref,
    ca_key: &PKeyRef<Private>,
    this_update: SystemTime,
    next_update: SystemTime,
    crl_number: u64,
    revoked: &[RevokedEntry<'_>],
) -> Result<Vec<u8>, Box<dyn Error + Sync + Send>>

Available on crate feature boring only.

Build a DER CertificateList for the MITM CA (ca_cert + ca_key).

The CRL covers every leaf the CA issues; revoked is empty for the common good case. The authorityKeyIdentifier comes from the CA’s SKI (falling back to a SHA-1 digest of its public key).