The Certificate Revocation List (CRL) lookup process may need to access a CRL Distribution Point site on the Internet to verify whether a certificate has been revoked. These commands are useful when the customer’s enterprise requires a proxy firewall to access the Internet.